Issue

• I have following configuration in Apache httpd and found that RequireAll configuration inside Location directive overwrite authorization configuration in Files sections in Apache. i.e. Access of http://192.168.1.1/.htaccess is successful. Even access to .htaccess file is denied as per Files section configuration.

<Files ".ht*">
    Require all denied
</Files>

<VirtualHost 192.168.1.1:80>
ServerName 192.168.1.1
 <Location />
  <RequireAll>
   Require all granted
   Require not ip 127.0.0.1
  </RequireAll>
 </Location>
</VirtualHost>