Return-Path: 
 <users-return-25715-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 20183 invoked by uid 500); 11 Apr 2003 23:58:56 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
list-post: <mailto:users@httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 20170 invoked from network); 11 Apr 2003 23:58:55 -0000
Received: from venus.commerce.ubc.ca (137.82.154.16)
  by daedalus.apache.org with SMTP; 11 Apr 2003 23:58:55 -0000
Received: from exchange.commerce.ubc.ca (exchange.commerce.ubc.ca
 [137.82.66.44])
	by venus.commerce.ubc.ca (8.9.3/8.9.3) with ESMTP id PAA27341
	for <users@httpd.apache.org>; Fri, 11 Apr 2003 15:44:44 -0700
Received: from Poste3947 (Toronto-HSE-ppp3742078.sympatico.ca [67.68.71.187])
 by exchange.commerce.ubc.ca with SMTP (Microsoft Exchange Internet Mail
 Service Version 5.5.2656.59)
	id 2DLPCJ24; Fri, 11 Apr 2003 16:59:28 -0700
Date: Fri,
 11 Apr 2003 19:58:44 -0400 (=?ISO-8859-1?Q?Est_=28heure_d'=E9t=E9=29?=)
From: Joshua Slive <joshua@slive.ca>
To: users@httpd.apache.org
In-Reply-To: <1050104878.2460.15.camel@springbamboo>
Message-ID: <Pine.WNT.4.53.0304111956550.1456@Poste3947>
References: <1050104878.2460.15.camel@springbamboo>
X-X-Sender: slive@exchange.commerce.ubc.ca
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N
Subject: Re: [users@httpd] Setup HTTP server


On Fri, 11 Apr 2003, Loc Nguyen wrote:
> I am running an Apache web server version 1.3.26 on Debian Linux.
> By default, the web server returns the server version as "Server:
> Apache/1.3.26 (Unix) Debian GNU/Linux". Can I change this to say
> something like "Server: Webserver" ? I don't want to give out too much
> information about the web server.
>
> Another question: When I telnet to the web server and issuing "OPTIONS
> *" method, I get back "Allow: GET, HEAD, OPTIONS, TRACE". Can I reject
> the OPTIONS method request with a 400 Bad Request error message ?

Seems like a silly thing to do with your time.  How is this at all
dangerous?

Anyway, have you tried

<Location />
<Limit OPTIONS>
Order allow,deny
Deny from all
</Limit>
</Location>

This will give you a 403 rather than a 400, but sending back a 400 in this
case seems to me like a violation of the HTTP standards.

Joshua

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org