lucy24 - 2:40 am on Feb 20, 2012 (gmt 0)
Only one deny takes effect, the last one in the list.
OK, what glaringly obvious thing am I overlooking?
Incidentally, I put my environmental deny in the same place as the IP denys:
Deny from env=keep_out
Deny from 18.104.22.168/17
Deny from 38.100
... et cetera, et cetera.
Does <Files *> mean anything? I would have thought it's the same as not using an envelope at all.
Oh, and I just say BrowserMatch. Saves several bytes ;)