Apache – Disable HTTP TRACE / TRACK Methods

Plugin Name: HTTP TRACE / TRACK Methods Allowed


To turn off track and trace methods globally on the server add the following line:

vim /etc/httpd/conf/httpd.conf
TraceEnable Off

To turn off track and trace methods for individual virtual hosts add the follwowing to the vhost config:
RewriteEngine On
RewriteRule .* – [F]


Check the apache config:
/usr/sbin/apachectl -t
Syntax OK


Restart apache:

/etc/init.d/httpd restart
Stopping httpd:                                            [  OK  ]
Starting httpd:                                            [  OK  ]


Further apache information http://httpd.apache.org/docs/2.2/mod/core.html#traceenable