On Thu, Mar 15, 2007 at 12:11:35PM -0600, Gregg Reynolds wrote:
I'm unsure of the meaning of limit_except. This is how I understand the
syntax:
limit_except METHODS { (ALLOW-CLAUSE | DENY-CLAUSE)* }
where METHODS is a list of HTTP method tokens and the clauses are
('allow' | 'deny') SP+ (IPADDR | HOSTNAME | 'all' )+ ;
Is that it? Can anything else go in the block? Any other allowed values?
My understanding is that "limit_except" simply associates a method
with a list of allow/deny clauses governing use of the method.
What confuses me is the name. Why "except"? Is "accept" the
intention? As in "server, please limit the acceptance of this method
according to the allow/deny clauses that follow."
The correct name should be "limit_methods_except". For example
limit_methods_except GET {
allow ...
deny all;
}
All methods expect GET/HEAD are allowed to the specified hosts.