Apache should only allow localhost by default