Hi I recognised, that for some Java-Applets (http://java.sun.com/applets/jdk/1.4/demo/applets/BarChart/example1.html) I got TCP_DENIED/407-errors in the access.log. Depending on the browser, I got an authentication window or a simple java-error (a "x" in the browser-window). I searched the forum and found a valid solution for all IE's >6.0 (because I'm authentication with kerberos): acl JAVA browser Java/1.3 Java/1.4 Java/1.5 Java/1.6 http_access allow JAVA But with firefox this will not works. Is there a way (perhaps with useragent) to get also the firefox running with the rule above? Or is there also another way to allow java applets instead of allowing the whole java? Thanks a lot. Tom