On Fri, 2004-08-20 at 17:06, Marten Lehmann wrote:
> Are the ACLs finished after the first successful "deny"? Or are they
> proceeded anyway, because there might be an accept later?
Any acl is terminated by the first successful accept, deny, defer,
discard or drop; also by an unsuccessful require.
This is why acls are typically written as a set of conditions of things
you don't like each with a deny with a few favourable conditions that
accept.
Nigel.
--
[ Nigel Metheringham Nigel.Metheringham@??? ]
[ - Comments in this message are my own and not ITO opinion/policy - ]
