From b4c8a14f168d986e0821d5c71a368a05e7694ce0 Mon Sep 17 00:00:00 2001
From: Daniel Gruno <humbedooh@apache.org>
Date: Sun, 13 May 2012 08:24:19 +0000
Subject: [PATCH] Add the notion that negated values cannot stand alone as a
 requirement for access.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1337806 13f79535-47bb-0310-9956-ffa450edef68
---
 docs/manual/howto/access.xml | 26 ++++++++++++++++++--------
 1 file changed, 18 insertions(+), 8 deletions(-)

diff --git a/docs/manual/howto/access.xml b/docs/manual/howto/access.xml
index a24220af1bf..20aa043bb64 100644
--- a/docs/manual/howto/access.xml
+++ b/docs/manual/howto/access.xml
@@ -68,8 +68,8 @@
     <p>The usage of these directives is:</p>
 
     <highlight language="config">
-Require host <var>address</var>
-Require ip <var>ip.address</var>
+Require host address
+Require ip ip.address
     </highlight>
 
     <p>In the first form, <var>address</var> is a fully qualified
@@ -85,15 +85,25 @@ Require ip <var>ip.address</var>
     syntax.</p>
 
     <p>You can insert <code>not</code> to negate a particular requirement.
+    Note, that since a <code>not</code> is a negation of a value, it cannot 
+    be used by itself to allow or deny a request, as <em>not true</em>
+    does not constitute <em>false</em>. Thus, to deny a visit using a negation,
+    the block must have one element that evaluates as true or false.
     For example, if you have someone spamming your message
     board, and you want to keep them out, you could do the
     following:</p>
 
-    <highlight language="config">Require not ip 10.252.46.165</highlight>
+    <highlight language="config">
+&lt;RequireAll&gt;
+    Require all granted
+    Require not ip 10.252.46.165
+&lt;/RequireAll&gt;
+</highlight>
 
-    <p>Visitors coming from that address will not be able to see
-    the content covered by this directive. If, instead, you have a
-    machine name, rather than an IP address, you can use that.</p>
+    <p>Visitors coming from that address (<code>10.252.46.165</code>)
+    will not be able to see the content covered by this directive. If, 
+    instead, you have a machine name, rather than an IP address, you 
+    can use that.</p>
 
     <highlight language="config">Require not host <var>host.example.com</var></highlight>
 
@@ -101,8 +111,8 @@ Require ip <var>ip.address</var>
     you can specify just part of an address or domain name:</p>
 
     <highlight language="config">
-Require not ip <var>192.168.205</var>
-Require not host <var>phishers.example.com</var> <var>moreidiots.example</var>
+Require not ip 192.168.205
+Require not host phishers.example.commoreidiots.example
 Require not gov
     </highlight>
 
-- 
2.47.3