Hallo Matthias!
Thanks for your post, it brought me on the right track! Additionally, I found the MediaWiki ShortURL Builder at https://shorturls.redwerks.org/. From there I added a few more {deny all;} rules.
And the result seems to be working now!
Thanks again ... und viele Grüße
Jörg