Thanks, deny + redirecting toward my own 403 page will do :) Posted at Nginx Forum: http://forum.nginx.org/read.php?2,210944,212006#msg-212006