Deny access to subfolder and file with .htaccess

I need to deny access to configuration files under some subfolder. Currently I have this rule but it doesn't work: Order deny,allow Deny from all If I go to www.mysite.com/foo/foo2/file.xml, I can view the file. I need to deny all file accesses into fooand bar recursively **UPDATE** I have tried this this configuration but have an Internal Error Order Allow,Deny Deny from all