I am running jboss-3.0.3_tomcat-4.1.12 in our production. My jsps are in the folder /jboss/server/default/deploy/ear/war/. I have also some other folders like images etc. under this folder. when I type the url something like: http://demo.com/images, I see the contents of the folder images. Is there any way to prevent the display of these folders from public access?