commit 7d76e21a04c7df54c9db31a841f6bbc68361030d
from: Isaac Meerleo <isaac@itm.works>
date: Fri Jul 17 14:00:13 2026 UTC

document http_allow and http_block defaults

commit - e61bc0a1de536144d337a2ad8ed4bfc0163d0d5c
commit + 7d76e21a04c7df54c9db31a841f6bbc68361030d
blob - 6e230ba39625996c74c90c4214ffc8af98c7f310
blob + 1b7a16b8769e9b408730b8ed5e4c7c729edf5313
--- src/fugu/fugu.conf.5
+++ src/fugu/fugu.conf.5
@@ -256,10 +256,30 @@ The special pattern
 .Sq *
 matches any host.
 Host matching is case-insensitive.
+The default is to allow no destinations and not offer the
+.Cm http_request
+tool.
+This does not affect
+.Cm web_search
+or
+.Cm web_fetch .
 .It Cm http_block Ar patterns
 Refuse destinations matching patterns in the same form as
 .Cm http_allow .
 A block always overrides an allow.
+The default is to apply no block patterns.
+Specifying
+.Cm http_block
+without
+.Cm http_allow
+does not offer the
+.Cm http_request
+tool.
+Every destination must still match
+.Cm http_allow
+and pass the built-in URL and address checks; resolved private, loopback,
+link-local, and other non-public addresses are refused independently of these
+patterns.
 .It Cm max_bg_jobs Ar number
 Set the maximum number of concurrent background shell jobs.
 The value must be between 0 and 256 and defaults to 4.