Added the "FilterDefaultDeny" directive to allow the user to select whether the default policy of the filter is to allow everything which isn't denied, or to deny everything which isn't allowed.

1 files changed, 10 insertions, 0 deletions

diff --git a/doc/tinyproxy.conf b/doc/tinyproxy.conf
index e104b58..e24513c 100644
--- a/doc/tinyproxy.conf
+++ b/doc/tinyproxy.conf
@@ -134,6 +134,16 @@ Allow 192.168.1.0/25
 #FilterExtended On
 
 #
+# Change the default policy of the filtering system.  If this directive is
+# commented out, or is set to "No" then the default policy is to allow everything
+# which is not specifically denied by the filter file.
+#
+# However, by setting this directive to "Yes" the default policy becomes to
+# deny everything which is _not_ specifically allowed by the filter file.
+#
+#FilterDefaultDeny Yes
+
+#
 # If an Anonymous keyword is present, then anonymous proxying is enabled.
 # The headers listed are allowed through, while all others are denied. If
 # no Anonymous keyword is present, then all header are allowed through.