httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Joshua Slive <jos...@slive.ca>
Subject Re: [users@httpd] Http Trace test
Date Fri, 11 Jun 2004 16:57:18 GMT

On Fri, 11 Jun 2004, PINNI, BALANAND (SBCSI) wrote:
> I had set the following steps in httpd.conf to disable Trace as shown
> below:
> ##################
> #HTTP Trace    Disable
> ##################
> RewriteEngine On
> RewriteCond %{REQUEST_METHOD} ^TRACE
> RewriteRule .* - [F]
> RewriteCond %{REQUEST_METHOD} ^(GET|POST|HEAD)

What is that last RewriteCond doing?  Nothing useful, as far as I can see.

> Now I how do I ensure that its disabled ?
>
> I tested in the following  way , is it ok?
>
> #Telnet hostname 80
> TRACE / HTTP /1.1
> Host:hostname
>
> HTTP/1.1 200 OK
> Date: Fri, 11 Jun 2004 12:16:57 GMT
> Server: IBM_HTTP_Server/2.0.42.1 2.0.44 (Unix) DAV/2
> Connection: close
> Content-Type: message/http
>
> TRACE / HTTP /1.1
> Host: hostname

It looks like you have *not* succesfully disabled TRACE.  The point of 
TRACE is to return your request to you, and that is what it is doing.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message