httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "PINNI, BALANAND (SBCSI)" <bp3...@sbc.com>
Subject RE: [users@httpd] Http trace is still on.
Date Tue, 09 Mar 2004 20:10:38 GMT
I did the same in my conf file for IBM apache 1.36 and 2.40 and on rescan it
got cleared.

If you have websphere running on the box you can see it in stdout.txt during
bouncing of websphere that trace disabled display in it.
Hope u stopped and restarted apache?



-----Original Message-----
From: parks fields [mailto:parks@lanl.gov] 
Sent: Tuesday, March 09, 2004 1:56 PM
To: users@httpd.apache.org
Cc: dotti@lanl.gov; bobk@lanl.gov; dermer@lanl.gov
Subject: [users@httpd] Http trace is still on.



Hello again,

I am running apache 2.0.46 on RH enterprise ws3.0. The 
security scan list Http trace as a risk and I need to turn 
it off. A member of this list said I should add the 
following to my httpd.conf file.
         RewriteCond %{REQUEST_METHOD} TRACE [NC]
         RewriteRule / [F,L]
         RewriteEngine On
         RewriteCond %{REQUEST_METHOD} ^TRACE

I did. I have rebooted the machine.
The security scan still list it as being enabled.  Attached 
is my conf file.
Since I am new at this could someone explain what I am doing 
wrong.

TIA

parks

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message