Gsyfuy

I'm having a problem allowing my IP address access to the downloader folder when using nginx to deny all other IP's. Any ideas where I'm going wrong with the below? I've tried with my IPv4 and IPv6 address, neither works and results in a 403 forbidden.
(Domain and IP I've replaced for security)

   server {

    listen   80 default;



    root /var/www/mywebsiteaddress.co.uk/httpdocs;

    server_name mywebsiteaddress.co.uk;



    location / {

        index index.html index.php;

        # First attempt to serve request as file, then

        # as directory, then fall back to displaying a 404.

        try_files $uri $uri/ @handler;

    }



    ## These locations would be hidden by .htaccess normally

    location ^~ /app/                { deny all; }

    location ^~ /includes/           { deny all; }

    location ^~ /lib/                { deny all; }

    location ^~ /media/downloadable/ { deny all; }

    location ^~ /pkginfo/            { deny all; }

    location ^~ /report/config.xml   { deny all; }

    location ^~ /var/                { deny all; }

    location ^~ /downloader/     { allow 123.456.789.0; deny all; }





    location /var/export/ { ## Allow admins only to view export folder

        auth_basic           "Restricted"; ## Message shown in login window

        auth_basic_user_file htpasswd; ## See /etc/nginx/htpassword

        autoindex            on;

    }



    location  /. { ## Disable .htaccess and other hidden files

        return 404;

    }



    location @handler { ## Magento uses a common front handler

        rewrite / /index.php;

    }



    location ~ .php/ { ## Forward paths like /js/index.php/x.js to relevant handler

        rewrite ^(.*.php)/ $1 last;

    }



    location ~ .php$ {

        if (!-e $request_filename) { rewrite / /index.php last; } ## Catch 404s that try_files miss



        expires        off; ## Do not cache dynamic content

        fastcgi_pass   unix:/var/run/php5-fpm.sock;

        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;

        fastcgi_param  MAGE_RUN_CODE default; ## Store code is defined in administration > Configuration > Manage Stores

        fastcgi_param  MAGE_RUN_TYPE store;

        include fastcgi_params;

    }

}

I know this i an old post, but we block access to magmi like this:

   location ~* ^/(index.php/)?magmi {



     include includes/admin-ips;



     deny all;

With admin-ips being a text file with a list of ipaddress eg:

allow **.***.**.**/32;