Dispatcher will not deny content paths

What part is not working?  Does sites still serve and siteb as well, or do neither work?  Is there anything in the dispatcher cache for siteb already?

The problem is Site B and any of its content / assets should NOT be reachable via the external facing webserver / dispatcher instance.

I placed deny filters in the dispatcher conf, but I am still able to get to resources of site b.

I commented dispatcher cache to isolate the issue and cleared cache.

Check dispatcher.log to see what farm it is being served from.  It would say something like this:

Found farm siteb for siteb.company.com

It is possible it is getting through using another farm definition.  I have seen invalidation_only serve content when it should not.

We have two separate webservers.  One exposed to the internet with references for "sitea" only.  There is only one farm on that server and in the dispatcher configuration we are trying to deny access to /siteb path.  This is something that should be a simple deny rule but is not working.

We have an internal facing webserver with siteb configuration only, that is not exposed to the public.

The dispatcher is reacting to other changes, but not the deny rules.

I would still say double check the dispatcher logs to see what messaging you get when you hit it.  Set debugging for a few, hit the path for siteb through sitea url and see if there is any messaging on the path.  You might also try changing your deny from url to glob to see if that will block it.