In .htaccess I have something like this: order allow,deny allow from 192.168.x.x/24 <Files robots.txt> allow from all </Files> RewriteEngine On RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} / RewriteRule ^(.*)$ https://mydomain49459302.com/$1 [R,L] AuthName "Restricted Area" AuthType Basic AuthUserFile /var/www/.htpasswd AuthGroupFile /dev/null require valid-user I want to restrict http access to the server to certain subnets, require SSL and a username and password. The exception is the robots.txt file. I want to allow anyone access to that. How do I tell it not to enforce a password or SSL only on robots.txt? --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx