1. OLS only supports rewrite rules in .htaccess. "deny from all" is not rewrite rule hence OLS doesn't support it.
You can try the following rewrite rule in /src/.htaccess and restart OLS to make effective.
RewriteRule ^(.*)$ - [F,L]
2. Deny Access to specific file extensions