If Apache is moved from listening on ALL IP's to just the servers main IP - then this items fails :
net.tcp.service[http]

I have to change it to this to work :
net.tcp.service[http,10.0.0.10,80]

E.g. This works
$ netstat -npl
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0:80 0.0.0.0:* LISTEN 22247/httpd

This fails :
$ netstat -npl
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 10.0.0.10:80 0.0.0.0:* LISTEN 22247/httpd