On Sun, Aug 21, 2016 at 1:43 PM, Maxim Khitrov <max@mxcrypt.com> wrote:
> Hi,
>
> I'm running nginx v1.9.10 on OpenBSD with the following server definition:
>
> server {
> listen 80;
> server_name example.com;
> location / {
> deny all;
> limit_except POST {
> allow all;
> proxy_pass http://10.1.2.3;
> }
> proxy_set_header Host $host;
> }
> }
>
> To my surprise, all GET requests are allowed and are passed to the
> backend server. Is this a bug or am I doing something stupid? In the
> final configuration I want to only allow GET requests, but I'm
> limiting to POST for now to simplify testing.
>
> -Max

I got it working by swapping 'allow' and 'deny' directives and moving
proxy_pass out of limit_except. I was just confused by the
documentation for limit_except. Sorry for the noise.

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx