Hi,

I'm running nginx v1.9.10 on OpenBSD with the following server definition:

server {
listen 80;
server_name example.com;
location / {
deny all;
limit_except POST {
allow all;
proxy_pass http://10.1.2.3;
}
proxy_set_header Host $host;
}
}

To my surprise, all GET requests are allowed and are passed to the
backend server. Is this a bug or am I doing something stupid? In the
final configuration I want to only allow GET requests, but I'm
limiting to POST for now to simplify testing.

-Max

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx