server {

        listen   [::]:80;

        server_name  test.whatevz.net;

        access_log   /var/log/nginx/test.whatevz.net/access.log;

        error_log   /var/log/nginx/test.whatevz.net/error.log;

        root   /srv/test.whatevz.net/;

        index index.php;

        location / {

                deny all;

        }

}

And yet, as you can see for yourself, it serves up index.php happily.

I'm really quite stumped and would love some advice for what to do here.

I have another nginx setup where I've done the same test, and it denies as expected, so there must be something local in my config causing this.

cheers,

     / Brett