Need Help with Apache AllowOverride

[Mark Phillips <mark@xxxxxxxxxxxxxxxxxxxxx>]

I have a web server at webIP off site. I have a second server for
photos running a php photo gallery app behind apache at photoIP on my
local LAN. I have a page on the web server that uses iframes to the
photo server's images.

I am trying to restrice access to the photo server to requests from
the web server using apache Allowoverride on the photo server. Here is
what I have:

<VirtualHost photoIP:8080>
        
        DocumentRoot /var/www/gallery

        <Directory />
                Options FollowSymLinks
                AllowOverride None
        </Directory>

        <Directory /var/www/gallery>
                Options Indexes FollowSymLinks MultiViews

                AllowOverride All FileInfo Options
                Order allow,deny
                Deny from all
                # internal access
                Allow from 192.168.25.0/24

                Allow from 127
                # Web server
                Allow from webIP
        </Directory>

        ErrorLog /var/log/apache2/hammerhead/

error.log

        # Possible values include: debug, info, notice, warn, error, crit,
        # alert, emerg.
        LogLevel debug

        CustomLog /var/log/apache2/access.log combined

</VirtualHost>

I can access the photos from a machine on my local LAN, but not from hosts off my LAN. The only way to get it to work is to change Deny from all to Allow from all. What am I doing wrong?

Thanks!

Mark