httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From yogeen honnavar <yog...@yahoo.com>
Subject [users@httpd] Problem in disabling HTTP OPTIONS method
Date Fri, 07 May 2010 11:11:47 GMT
Dear users,

We tried to disable HTTP options method in our apache server(version httpd-2.0.63). We have
added the following lines in httpd.conf :

<Location />
     <LimitExcept GET POST HEAD CONNECT>
        order deny,allow
        deny from all
       LimitExcept>
</Location>

But when we test for OPTIONS method, it is still available as shown below :

cmd:\>telnet 192.16.1.1 80
Trying 192.16.1.1...
Connected to 192.16.1.1.
Escape character is '^]'.
OPTIONS * HTTP/1.0

HTTP/1.1 200 OK
Date: Fri, 07 May 2010 10:49:43 GMT
Server: Apache
Allow: GET,HEAD,POST,OPTIONS
Content-Length: 0
Connection: close
Content-Type: text/plain

Connection closed by foreign host.

------------

Please let us know how to disable OPTIONS method in httpd. we do not prefer to use mod_rewrite.

Or else is it possible to configure such that the Allow line is not shown when queried:

Allow: GET,HEAD,POST,OPTIONS

Waiting for response....

Thanks and regards
-yogeen honnavar




---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message