Thanks for your advice. I was already aware of Allow/Deny. What I didn't know was that I could put <Directory> inside <VirtualHost>. Quite basic but I don't configure apache so often. Andreas