This is what I have now. I'm trying to only allow / do proxy'ing for requests from the localhost, meaning anyone else shouldn't be able to visit /ha_proxy and be directed to, say, the 169.25 IP. Is there a way to do this?

SSLProxyEngine on
SSLProxyVerify none
SSLProxyCheckPeerCN off
SSLProxyCheckPeerExpire off
ProxyTimeout 3600
ProxyPassMatch "^/ha_proxy/([0-9])/(.*)$" "https://169.25.0.$1:43/$2"
ProxyPassMatch "^/manager_proxy/(.*?)/(.*)$" "https://$1/$2"
ProxyPassMatch "^/rest_proxy/(.*)$" "https://127.0.0.1:9/$1"