On 26/08/07, Jack Stone <antennex@xxxxxxxxxxx> wrote: > >From: "Vincent Bray" <noodlet@xxxxxxxxx> > >RewriteEngine On > >RewriteCond %{REMOTE_ADDR} !^trusted.host.pattern$ > >RewriteRule ^/_vti - [F] > Thanks for those suggestions. Used the mod_rewrite one and seems to be doing > the trick. The use of Frontpage attempts doesn't happen very often and so > hard to test, except I see searches now getting 403s (forbidden) and I can > load up from my trusted IP without any problem. I should add to this another non-rewrite option (it's a habit to avoid rewrite whenever possible, not because there's anything wrong with it, but because there are more specialised options). <LocationMatch ^/_vti> Order allow,deny Allow from trusted.host.com </LocationMatch> This does the same thing, and should be quicker. Using mod_rewrite here is only necessary when you need to see stuff like the query string, or other non-uri-ref request attributes. -- noodl PS. Your hotmail account appears to be full. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx