instead of FollowSymLinks use: Options SymLinksIfOwnerMatch
so no one can link to / unless they are root (assuming / is owned by root ;-) note that this doesn't answer your question, but I think it's the solution... On Sun, 11 Apr 1999, Pere Camps wrote: > Hi! > > I've found that if an user makes a soft link from his public_html > directory into /, then an external user can browse throughout all the > directory hierachy. > > Can anybody tell me how to make apache server only the pages which > are directly under the public_html directories and /usr/lib/cgi-bin? > > Thanks in advance! > > -- p. > -- kc Kevin Conover: [EMAIL PROTECTED]