> This is one reason we proxy the CF requests through Apache, we can just > use the normal apache allow/deny directives.
I'm not sure what you mean by "proxy the CF requests". Do you have IIS and Apache on the same machine, with Apache being the default web server and handing off all requests for .cfm files to IIS? And I just tried adding /main/cfide.cfm and setting the permissions on that in IIS. Didn't work. Isn't there a setting in IIS that says "Check that this file exists", before it calls CFMX? Maybe enabling that as well might work. -- Aidan Whitehall <[EMAIL PROTECTED]> Macromedia ColdFusion Developer Fairbanks Environmental Ltd +44 (0)1695 51775 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4