Options -Indexes 
RewriteEngine On
RewriteCond $0 !^(favicon\.ico|favicon\.png|media|robots\.txt|crossdomain\.xml|css|js)
RewriteRule .* denied.html [QSA,L]