I'd like to add this...
SecRule REQUEST_FILENAME "^/autodiscover/autodiscover.xml$" "nolog,drop"
...to .htaccess, but I get ".htaccess: SecRule not allowed here" in error.log.
I tried SecRule by itself, wrapped in IfModule security2_module, and wrapped in IfModule mod_security2.c, no joy.
I really want a drop and not a 301... any other way to do that?