Another somewhat left field solution is to put a squid proxy cache on port 80 with the desired acl list. Squid does acls to death. You then redirect from the squid to your server (which now lives on another port - say 81). There are some speed advantages to this approach as you serve a lot of requests from the squid cache (which is of course designed to be fast) thus unloading your httpd. There are claims of an order of magnitude ie 10x speed increase.... Full details at squid-cache.org See the httpd-accelerator mode section in the FAQ.

tachyon

s&&rsenoyhcatreve&&&s&n.+t&"$'$`$\"$\&"&ee&&y&srve&&d&&print