Dear users,
We tried to disable HTTP options method in our apache server(version httpd-2.0.63). We have added the following lines in httpd.conf :
<Location />
<LimitExcept GET POST HEAD CONNECT>
order deny,allow
deny from all
LimitExcept>
</Location>
But when we test for OPTIONS method, it is still available as shown below :
cmd:\>telnet 192.16.1.1 80
Trying 192.16.1.1...
Connected to 192.16.1.1.
Escape character is '^]'.
OPTIONS * HTTP/1.0
HTTP/1.1 200 OK
Date: Fri, 07 May 2010 10:49:43 GMT
Server: Apache
Allow: GET,HEAD,POST,OPTIONS
Content-Length: 0
Connection: close
Content-Type: text/plain
Connection closed by foreign host.
------------
Please let us know how to disable OPTIONS method in httpd. we do not prefer to use mod_rewrite.
Or else is it possible to configure such that the Allow line is not shown when queried:
Allow: GET,HEAD,POST,OPTIONS
Waiting for response....
Thanks and regards
-yogeen honnavar
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|