You can also frequently do this from a .htaccess file.

The Allow from localhost type stuff mentioned above, that is...