Hello, today I have an, hopefully, easier question :) In my configuration there's a vhost with ServerNames, -Aliases, a document root, <directory /> and rewriterules for serving dynamic content. Now I want to have a basic_auth before anything else, you should have to log in before you get to any of the directorys or to any rewrite rule. I fiddled this and that and couldn't get it to work to protect the rewrite_rules... <VirtualHost *:80> ServerName zmsdemo.desy.de ServerAlias zmsdemo CustomLog /scratch/apache_log/zmsdemo.log DocumentRoot "/afs/desy.de/group/weboffice/apachelogs/combined/htdocs/zmsdemo" <Directory /> Options FollowSymLinks AllowOverride None Order Deny,Allow Deny from all Allow from all </Directory> RewriteEngine on # for accessing static content RewriteRule ^/stats(.*) /stats$1 [L] # for the dynamic stuff RewriteRule ^(.*) http://localhost:8080/sites/site_zmsdemo$1 [P,L] </Virtualhost> ------------------------------------------------------------------------ Carsten Germer Deutsches Elektronen Synchrotron (Web-Office, IT) phone: +49-40-8998-1661 Notkestr. 85 web: http://wof.desy.de 22607 Hamburg e-mail: carsten.germer@xxxxxxx Germany ------------------------------------------------------------------------ --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx