Correct the access control feature documentation page (#546)

fabiolb · Sep 12, 2018 · d16e94b · d16e94b
1 parent dc67d5a
commit d16e94b
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/docs/content/feature/access-control.md b/docs/content/feature/access-control.md
@@ -40,8 +40,8 @@ The source ip used for validation against the defined ruleset is
 taken from information available in the request.
 
 For `HTTP` requests the client `RemoteAddr` is always validated
-followed by the first element of the `X-Forwarded-For` header, if
-present.  When either of these elements match an `allow` the request
+followed by all elements of the `X-Forwarded-For` header, if
+present.  When both of these elements match an `allow` the request
 will be allowed; similarly when either element matches a `deny` the
 request will be denied.