Disabling TRACE requests

Some security certifications require this. The easiest way to do this is to include the following in a file in /etc/httpd/conf.d (e.g. /etc/httpd/conf.d/notrace.conf), since this directory is automagickally included:

RewriteEngine On
RewriteCond %{REQUEST_METHOD} (TRACE|TRACK)
RewriteRule .* - [F,L]

Submitted by jkelly on Sat, 2006-09-02 23:52. categories [ | ] login or register to post comments