is this an apache server on linux ? Aside from running the server settings by default, did you modified any entries? If so, what are those entries..e.g. vhosts.conf, myPHPAdmin...etc.. Do you have .htaccess in or above that directory?
can you post the < directory /> part of your httpd.conf
Deny from all