Apache – Disable HTTP TRACE / TRACK Methods

Plugin Name: HTTP TRACE / TRACK Methods Allowed

 

To turn off track and trace methods globally on the server add the following line:

vim /etc/httpd/conf/httpd.conf
TraceEnable Off

To turn off track and trace methods for individual virtual hosts add the follwowing to the vhost config:
RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^TRACE
RewriteRule .* – [F]

 

Check the apache config:
/usr/sbin/apachectl -t
Syntax OK

 

Restart apache:

/etc/init.d/httpd restart
Stopping httpd:                                            [  OK  ]
Starting httpd:                                            [  OK  ]

 

Further apache information http://httpd.apache.org/docs/2.2/mod/core.html#traceenable