Yes that's exactly what i found meanwhile, but i've seen your post as well, accurate of course. Thank you so much for your reply...

I've implemented a proxy pass to query the main server, a php that checks everything...then xforwards to the downloading server..it's amazing...simply transparent, and works like a charm...
i've even implemented expiring links and such...

My concern was that i would of see the Xforward thing on the headers, but i've sniffed the headers on client side and you can't see nothing :) that's why it's the best solution ever...
and of course the files on the webserver are not public, they are marked as internal , so normal clients can't have access unless it's forwarded from the php script

Great Stuff.. i've seen that apache does it as well with a custom module...