I think it is an order of operation. So allow all is the answer.. For example: Deny ALL Allow A, B and C Is more secure than, Allow A, B and C, Deny all. I also think that the second example would not work like desired. Unlike IPCHAINS. I believe the apache statements are read and computed as a whole - as opposed to stopping and executing a given rule when a match is made. :) Cheers, Richard. ----- Original Message ----- From: "Dan Brown" <[EMAIL PROTECTED]> To: "e-smith-devinfo" <[EMAIL PROTECTED]> Sent: Friday, July 13, 2001 8:37 AM Subject: [e-smith-devinfo] httpd statements? > Having developed my method of adding arbitrary statements to the > <Directory> sections of httpd.conf for ibays, I now am not sure if it's going > to have the desired effect. How does apache handle AllowOverride directives? > For example, if you have > > <Directory /foo> > AllowOverride None > AllowOverride All > </Directory> > > Will it allow all, or none? I'd think it would take the last statement > (allowing all), but it doesn't seem to be acting that way, and the docs I found > on apache.org didn't seem quite clear in this regard. Thanks for any info! > > -- > Dan Brown, KE6MKS, [EMAIL PROTECTED] > "Since all the world is but a story, it were well for thee to buy the more > enduring story rather than the story that is less enduring." > --The Judgment of St. Collum Cille > > -- > Please report bugs to [EMAIL PROTECTED] > Please mail [EMAIL PROTECTED] (only) to discuss security issues > Support for registered customers and partners to [EMAIL PROTECTED] > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org > > -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org