Josh is correct - if you have that file above the web root then making it readable to the "Browser User" may be your ticket.

Regards,

Brett Harris
Infopop Corporation