In 5.4.5 of the site manager's manual, http://www.lsoft.com/manuals/1.8e/sitemgr/sitemgr.html#_Toc9062339 , it's very clearly stated: -- begin excerpt -- 5.4.5. Creating a subdirectory for the archive interface Create a subdirectory on your web server to contain the various files LISTSERV will be creating for the web archive interface. The suggested name (and the name LISTSERV will expect by default) for the subdirectory you will create in this step is 'archives'. Under IIS, you would typically make the directory C:\INETPUB\WWWROOT\ARCHIVES for this purpose. For a unix server running Apache it might be /usr/local/etc/httpd/htdocs/archives . Please note the following IMPORTANT restrictions carefully: - Do not simply use your main HTML documents directory as LISTSERV will create quite a few files. It is much more orderly to keep the web archive interface's files and subdirectories in their own place in any case. - Do not use the directory you keep the list's notebook archives in for this purpose. Notebook archives should always be kept separate from the web interface, preferably in a completely separate directory hierarchy. - Corollary to the above: Do not set the Notebook= keyword for any list so that the list's notebook archives are kept in the subdirectory used by the web archive interface for the list. -- end excerpt -- Nathan At 11:52 AM 2/4/2004 -0800, Shinn Wu wrote: >I don't really understand the 'protection' of wa offers in UNIX. I >install wa in /usr/local/apache/cgi-bin and the archives is under >/usr/local/apache/htdocs/archives. All the archives can be accessed by >subscribers ONLY. BUT, you can easily bypass the email/password if you >know (or guess) the name of ANY archive, e.g, > >http://www.anysite.com/archives/test.log0301 > >or even better > >http://www.anysite.com/archive/test.html > >to search the whole list. It didn't offer any .htaccess. I must miss >something important, but I could not find it either in manual or LSTSRV-L. >Would someone shed a light or confirm that? Thanks. > >Shinn