On Thu, 2008-03-20 at 13:51 -0800, Chris Robertson wrote:
> Put the always direct line above the never direct one (or use multiple 
> ACLs and always direct lines).  They work just like http_access lines in 
> that it's a first match.

Not quite.. always_direct is always before never_direct.

always_direct allow A
never_direct allow B
always_direct deny C
never_direct allow D

is the same as

always_direct allow A
always_direct deny C
never_direct allow B
never_direct allow D

Regards
Henrik

Reply via email to