Merge remote-tracking branch 'origin/reverse-proxy-allow-match-or' into reverse-proxy-crowdsec-appsec

2026-09-23 23:29:08 +02:00 · 2026-09-23 09:55:28 +02:00
parent ba64c251f2 9847cbfef5
commit f39198bf16
1 changed files with 3 additions and 2 deletions
@@ -351,8 +351,9 @@ func (f *Filter) checkAny(addr netip.Addr, geo GeoResolver) Verdict {
 		cidrAllowed ||
 		(countryActive && country != "" && slices.Contains(f.AllowedCountries, country))
 	if !allowed {
-		// Both allowlists missing is reported against the CIDR list, the one
-		// checked first, so the reason stays stable for existing access logs.
+		// When neither allowlist admitted the address, the denial is reported
+		// against the CIDR list, the one checked first, so the reason stays
+		// stable for existing access logs.
 		if cidrActive {
 			return DenyCIDR
 		}