Disallow access to anything other than the redirects/ and www/ subdirs.