diff --git a/roles/download/templates/httpd/dl.fedoraproject.org.conf b/roles/download/templates/httpd/dl.fedoraproject.org.conf
index b548592278..6f70785950 100644
--- a/roles/download/templates/httpd/dl.fedoraproject.org.conf
+++ b/roles/download/templates/httpd/dl.fedoraproject.org.conf
@@ -32,6 +32,11 @@
    SSLProtocol {{ ssl_protocols }}
    SSLCipherSuite {{ ssl_ciphers }}
 
+  RewriteEngine On
+  RewriteCond %{REQUEST_URI} ^/pub/alt/virtio-win/.*$
+  RewriteRule .* - [F]
+
+
   # proxy all requests to anubis after ssl termination
 
   RequestHeader set "X-Real-Ip" expr=%{REMOTE_ADDR}