How about deprecating vfs-direct in Ansel for X-Sendfile support? http://tn123.ath.cx/mod_xsendfile/ Works with both Apache and Lighttpd, fixes the permissions problem, and the admins don't have to do much more configuration than with the vfs-direct feature. Jan. -- Do you need professional PHP or Horde consulting? http://horde.org/consulting/