On Wed, 16 Nov 2005, Ghislain Garcon wrote:

at the end of aclCheck(aclCheck_t * checklist) in file acl.c.

Yes..

Is this swap really needed for something else?

It's just how it works.

From the documentation on http_access:

        If none of the "access" lines cause a match, the default is the
        opposite of the last line in the list.  If the last line was
        deny, the default is allow.  Conversely, if the last line
        is allow, the default will be deny.  For these reasons, it is a
        good idea to have an "deny all" or "allow all" entry at the end
        of your access lists to avoid potential confusion.

Regards
Henrik

Reply via email to