limit_except ignored

Maxim Khitrov max at
Sun Aug 21 17:43:43 UTC 2016


I'm running nginx v1.9.10 on OpenBSD with the following server definition:

server {
    listen 80;
    location / {
        deny all;
        limit_except POST {
            allow all;
        proxy_set_header Host $host;

To my surprise, all GET requests are allowed and are passed to the
backend server. Is this a bug or am I doing something stupid? In the
final configuration I want to only allow GET requests, but I'm
limiting to POST for now to simplify testing.


More information about the nginx mailing list