The OnDeny directive provides non-HTTP–based access control to a directory. This directive sends a browser that fails the Limit directive to a specified URL.
You can use this directive only within Limit sections.
OnDeny URL
URL is the URL to which you redirect the browser.
access.cfg
The default is to let the normal HTTP 401 response deal with the authentication failure.
The following directive redirects any user who connects from outside .ni.com to the URL http://www.ni.com/deny.htm:
<Limit GET>
order deny,allow
deny from all
allow from .ni.com
OnDeny http://www.ni.com/deny.htm
</Limit>