Apache – Disable HTTP TRACE / TRACK Methods

Plugin Name: HTTP TRACE / TRACK Methods Allowed
 
To turn off track and trace methods globally on the server add the following line:
vim /etc/httpd/conf/httpd.conf
TraceEnable Off

To turn off track and trace methods for individual virtual hosts add the follwowing to the vhost config:
RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^TRACE
RewriteRule .* – [F]

 
Check the apache config:
/usr/sbin/apachectl -t
Syntax OK
 
Restart apache:
/etc/init.d/httpd restart
Stopping httpd:                                            [  OK  ]
Starting httpd:                                            [  OK  ]
 
Further apache information http://httpd.apache.org/docs/2.2/mod/core.html#traceenable