Thanks for all your replies. I just realized that it will be cumbersome
to test whether the settings work or not b/c I don't have a second
computer and internet connection to use to check the access to my
webserver. I have a dsl connection, so I suppose I could try using a
dial up modem to test it (will it work if I use the same computer but a
different internet connection?).

BTW, I'm wondering what is considered a more secure way of doing it -
using the "Listen" directive? or the "Order/Deny/Allow" directive?

Thanks.