Deny from all
Allow from localhost