ASP.NET Authorization for HTML files

Hi,
I have a website at which the members area is secured using ASP.NET authorization. It works fine for aspx files but people can still get through to accessing HTML files and Images.
How do I set folder/directory security so that anonymous users and not only be blocked from accessing aspx files but all other files in the directory too?
Any help would be much appreciated.
Thanks!
...