if he had it in http it wouldnt matter, he wouldnt get a forbidden he'd get the default apache page (unless he DID reconfigure httpd.conf)
try moving/renaming the index.html that you put there and just access the webserver (so you get the apache default page) - let us know if it shows up or if you get a forbidden
if it shows up then obviously the problem is with your index.html - just make an empty html file (with
Code:
<html>
<head>
</head>
<body>
</body>
</html>
and see if that loads, if it doesnt then give us the output of getfacl on the file (shows who owns and permissions)