I know I've gotten this to work for xmlrpc.php, but have since removed the block. Are people accessing your site as http://www.example.com, or without the www? (example.com)
Your entry looks like what I did, but my site doesn't include "www." Since my memory's a bit fuzzy, I may have just used "/xmlrpc.php"