I'm trying to move my Apache access control directives from the older Order, Allow, and Deny to the newer Require. Unfortunately, I'm unable to think a new way after having used the old way for so long.
Basically, I'd like to deny access to everyone except a few IP addresses. Using the old format, I had:
Order Deny,Allow Deny from all Allow from 192.168.123.123 Allow from 188.8.131.52
I think it should be something like:
Require all denied Require ip 192.168.123.123 Require ip 184.108.40.206
This appears to work.
But I'm uncertain if I should be not think like the "old way". Perhaps I should be using RequireAll or RequireAny some how, or even if I should nest them.