This website is deprecated, and remains online only for historic access to old issues and docs for historic versions of Virtualmin. It has been unmaintained for several years, and should not be relied on for up-to-date information. Please visit www.virtualmin.com instead.

How to Disable OPTIONS and TRACE Apache methods

4 posts / 0 new

Topic locked

Last post

#1 Tue, 03/13/2012 - 19:31

rogeriobrito

How to Disable OPTIONS and TRACE Apache methods

Hello all, How do I Disable the OPTIONS and TRACE Apache methods for all virtual servers?

Thank you

Rogerio

#2 Tue, 03/13/2012 - 22:08

andreychek

Howdy,

Well, for TRACE, all you'd need to do is edit your Apache config, set "TraceEnable Off", and then restart Apache.

For OPTIONS -- I'm not particularly familiar with that, though it looks like you may need to put together some mod_rewrite code in your Apache `config. There's some examples that you'll see if you Google "apache disable options".

-Eric

#3 Wed, 03/14/2012 - 23:16

rogeriobrito

Thank you Eric

#4 Wed, 06/27/2012 - 17:35

rogeriobrito

I got it working. To disable OPTIONS I had to include the following lines on each virtualserver in httpd.conf:

<LimitExcept GET POST>
      deny from all
</LimitExcept>

But it only worked after I commented the line: "allow from all".

So "allow from all" is not in effect on my virtualservers. Can that be a problem?

Thanks . Rogerio

Topic locked