<FilesMatch "-private\.pdf$">
order deny,allow
deny from all
allow from 128.2.
allow from 128.237.
allow from .cmu.edu
</FilesMatch>