Hi Bart,
On Thu, Nov 18, 2021 at 08:06:55PM +0100, Bart van der Schans wrote:
> Here is the patch:
>
> Fix "block" ACL by reverting accidental removal of code in
> 8ab2a364a8c8adf0965e74a41a2ff3cebd43e7a9
> ---
> diff --git a/src/cfgparse.c b/src/cfgparse.c
> index 857321e1..78f0ed76 100644
> --- a/src/cfgparse.c
> +++ b/src/cfgparse.c
> @@ -2823,6 +2823,16 @@ int check_config_validity()
> }
> }
>
> + /* move any "block" rules at the beginning of the http-request
> rules */
> + if (!LIST_ISEMPTY(&curproxy->block_rules)) {
> + /* insert block_rules into http_req_rules at the beginning
> */
> + curproxy->block_rules.p->n = curproxy->http_req_rules.n;
> + curproxy->http_req_rules.n->p = curproxy->block_rules.p;
> + curproxy->block_rules.n->p = &curproxy->http_req_rules;
> + curproxy->http_req_rules.n = curproxy->block_rules.n;
> + LIST_INIT(&curproxy->block_rules);
> + }
> +
> /* check validity for 'tcp-request' layer 4/5/6/7 rules */
> cfgerr += check_action_rules(&curproxy->tcp_req.l4_rules,
> curproxy, &err_code);
> cfgerr += check_action_rules(&curproxy->tcp_req.l5_rules,
> curproxy, &err_code);
Your patch has been committed as feeccc6e40e4d61b1e9fa84aca961aceabe39371
Thanks a lot !
Olivier
