> 1) It seems that all of these requests come through with a GET request. Is > there a way that Xitami can block any of those, as I don't expect anyone > coming to call with that as a gift. Sorry to burst your bubble, but web serverw work exclusively on GET requests, you block those, and a webserver doesn't work.