I think it is an order of operation.

So allow all is the answer..

For example:

Deny ALL
Allow A, B and C

Is more secure than,

Allow A, B and C,
Deny all.

I also think that the second example would not work like desired.

Unlike IPCHAINS.  I believe the apache statements are read and computed as a
whole - as opposed to stopping and executing a given rule when a match is
made.

:)


Cheers,
Richard.



----- Original Message -----
From: "Dan Brown" <[EMAIL PROTECTED]>
To: "e-smith-devinfo" <[EMAIL PROTECTED]>
Sent: Friday, July 13, 2001 8:37 AM
Subject: [e-smith-devinfo] httpd statements?


>     Having developed my method of adding arbitrary statements to the
> <Directory> sections of httpd.conf for ibays, I now am not sure if it's
going
> to have the desired effect.  How does apache handle AllowOverride
directives?
> For example, if you have
>
> <Directory /foo>
>   AllowOverride None
>   AllowOverride All
> </Directory>
>
>     Will it allow all, or none?  I'd think it would take the last
statement
> (allowing all), but it doesn't seem to be acting that way, and the docs I
found
> on apache.org didn't seem quite clear in this regard.  Thanks for any
info!
>
> --
> Dan Brown, KE6MKS, [EMAIL PROTECTED]
> "Since all the world is but a story, it were well for thee to buy the more
> enduring story rather than the story that is less enduring."
>  --The Judgment of St. Collum Cille
>
> --
> Please report bugs to [EMAIL PROTECTED]
> Please mail [EMAIL PROTECTED] (only) to discuss security issues
> Support for registered customers and partners to [EMAIL PROTECTED]
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> Archives by mail and
http://www.mail-archive.com/devinfo%40lists.e-smith.org
>
>


--
Please report bugs to [EMAIL PROTECTED]
Please mail [EMAIL PROTECTED] (only) to discuss security issues
Support for registered customers and partners to [EMAIL PROTECTED]
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org

Reply via email to