I'm making an argument in another forum regarding the directory listings being disabled by default in Tomcat 6.0.20 zip
I downloaded the tomcat 6.0.20 zip and checked web.xml and listings are set to false. The online docs indicate otherwise. http://tomcat.apache.org/tomcat-6.0-doc/default-servlet.html#secure Leo Donahue