diff --git a/rproxy b/rproxy
index 50ce818..48814ea 100644
--- a/rproxy
+++ b/rproxy
@@ -3,7 +3,7 @@
 # Публикация локальных сервисов через SSH-туннели + nginx на VPS
 # http://5.104.75.50:3000/Petro1990/rProxy
 
-VERSION="1.3.2"
+VERSION="1.3.3"
 CONF_DIR="/opt/etc/rproxy"
 CONF_FILE="$CONF_DIR/rproxy.conf"
 SERVICES_DIR="$CONF_DIR/services"
@@ -522,6 +522,11 @@ do_add_interactive() {
         proxy_set_header Origin \"http://$router_ip\";
         proxy_set_header Referer \"http://$router_ip/\";
     }
+
+    location @auth_required {
+        add_header WWW-Authenticate 'Basic realm=\"Keenetic NDM Auth\"' always;
+        return 401;
+    }
     "
     fi
 
@@ -541,6 +546,7 @@ server {
 
     location / {
         $( [ "$use_ndm_auth" = "yes" ] && echo "auth_request /rproxy_auth;" )
+        $( [ "$use_ndm_auth" = "yes" ] && echo "error_page 401 = @auth_required;" )
         proxy_pass http://127.0.0.1:$tunnel_port;
         proxy_http_version 1.1;
         proxy_set_header Upgrade \$http_upgrade;
@@ -582,6 +588,7 @@ server {
 
     location / {
         $( [ "$use_ndm_auth" = "yes" ] && echo "auth_request /rproxy_auth;" )
+        $( [ "$use_ndm_auth" = "yes" ] && echo "error_page 401 = @auth_required;" )
         proxy_pass http://127.0.0.1:$tunnel_port;
         proxy_http_version 1.1;
         proxy_set_header Upgrade \$http_upgrade;