Prevent access to /listing, only explicitly allow /http and /cgi-bin