Plugin Name: HTTP TRACE / TRACK Methods Allowed
To turn off track and trace methods globally on the server add the following line:
vim /etc/httpd/conf/httpd.conf
TraceEnable Off
To turn off track and trace methods for individual virtual hosts add the follwowing to the vhost config:
RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^TRACE
RewriteRule .* – [F]
RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^TRACE
RewriteRule .* – [F]
Check the apache config:
/usr/sbin/apachectl -t
Syntax OK
Restart apache:
/etc/init.d/httpd restart
Stopping httpd: [ OK ]
Starting httpd: [ OK ]
Further apache information http://httpd.apache.org/docs/2.2/mod/core.html#traceenable