Thank you so much. I am pretty sure the 403 comes from another source as well (as it does not happen under light http server load) but the 'love' regex was really a good show of having a nice hawk eye from yours :D Posted at Nginx Forum: http://forum.nginx.org/read.php?2,249857,249866#msg-249866