Adding rules to mod security

[jake66]

I've never done this before.

Say I want to ban any and all requests to _vti_bin.. how do I do it?
(I do not use frontpage & I have dozens of hack attempts to strange query strings containing this directory)

My mod security rules are stored at: /etc/httpd/conf/modsec.conf

I've edited configuration files in ssh before, so that part I am not worried about.
I am worried about entering the rule incorrectly and rendering scripts (or the entire site) useless.

[gergoe]

Using mod_access [httpd.apache.org]:

<Location /_vti_bin> 
 Order Deny,Allow 
 Deny from all 
</Location>

Using mod_rewrite [httpd.apache.org]:

RewriteEngine On 
RewriteRule ^/_vti_bin - [F,L]