In 5.4.5 of the site manager's manual,
http://www.lsoft.com/manuals/1.8e/sitemgr/sitemgr.html#_Toc9062339 , it's
very clearly stated:

-- begin excerpt --

5.4.5. Creating a subdirectory for the archive interface

Create a subdirectory on your web server to contain the various files
LISTSERV will be creating for the web archive interface. The suggested name
(and the name LISTSERV will expect by default) for the subdirectory you
will create in this step is 'archives'. Under IIS, you would typically make
the directory C:\INETPUB\WWWROOT\ARCHIVES for this purpose. For a unix
server running Apache it might be /usr/local/etc/httpd/htdocs/archives .
Please note the following IMPORTANT restrictions carefully:

- Do not simply use your main HTML documents directory as LISTSERV will
create quite a few files. It is much more orderly to keep the web archive
interface's files and subdirectories in their own place in any case.

- Do not use the directory you keep the list's notebook archives in for
this purpose. Notebook archives should always be kept separate from the web
interface, preferably in a completely separate directory hierarchy.

- Corollary to the above: Do not set the Notebook= keyword for any list so
that the list's notebook archives are kept in the subdirectory used by the
web archive interface for the list.

-- end excerpt --

Nathan

At 11:52 AM 2/4/2004 -0800, Shinn Wu wrote:
>I don't really understand the 'protection' of wa offers in UNIX.  I
>install wa in /usr/local/apache/cgi-bin and the archives is under
>/usr/local/apache/htdocs/archives.  All the archives can be accessed by
>subscribers ONLY.  BUT, you can easily bypass the email/password if you
>know (or guess) the name of ANY archive, e.g,
>
>http://www.anysite.com/archives/test.log0301
>
>or even better
>
>http://www.anysite.com/archive/test.html
>
>to search the whole list.  It didn't offer any .htaccess.  I must miss
>something important, but I could not find it either in manual or LSTSRV-L.
>Would someone shed a light or confirm that?  Thanks.
>
>Shinn