You have a security rule
SecFilterSelective THE_REQUEST "/g00d/" denyIf you request http://your.domain/g00d/...., if the corresponding file does not exist, Apache will return 403 access denied, while LSWS will return 404 not found. it is as designed, as 404 will not result in any security...