What is OPTIONS * HTTP/1.0

[ct2k7]

In my Apache status page, I see:

Srv PID Acc M CPU SS Req Conn Child Slot Client VHost Request
0-0 32420 6/10/10 K 0.38 0 0 0.0 0.01 0.01 69.157.120.90 movies.thinkteen.co.uk GET /images/english/newthread.gif HTTP/1.1
1-0 32422 0/13/13 _ 0.30 35 1 0.0 0.25 0.25 65.36.241.79 thinkteen.co.uk HEAD / HTTP/1.1
2-0 - 0/0/28 . 0.24 46 0 0.0 0.00 0.18 127.0.0.1 vps.thinkteen.co.uk OPTIONS * HTTP/1.0
3-0 32426 0/19/19 _ 0.78 39 216 0.0 0.21 0.21 79.70.53.65 movies.thinkteen.co.uk GET /css.php?theme=2 HTTP/1.1
4-0 32427 0/4/4 W 0.62 0 0 0.0 0.01 0.01 127.0.0.1 vps.thinkteen.co.uk GET /whm-server-status/ HTTP/1.0
5-0 32471 3/9/9 W 0.33 1 0 0.0 0.06 0.06 69.157.120.90 movies.thinkteen.co.uk GET /images/logo.php HTTP/1.1
6-0 32671 0/17/17 _ 0.48 8 430 0.0 0.14 0.14 69.157.120.90 movies.thinkteen.co.uk GET /css.php?theme=2 HTTP/1.1
7-0 1397 0/41/41 _ 0.33 21 0 0.0 0.16 0.16 79.70.53.65 movies.thinkteen.co.uk GET /images/on.gif HTTP/1.1
8-0 1401 0/14/14 _ 0.49 14 477 0.0 0.16 0.16 69.157.120.90 movies.thinkteen.co.uk GET /forumdisplay.php?fid=6 HTTP/1.1
9-0 1402 0/4/4 _ 0.17 39 0 0.0 0.02 0.02 79.70.53.65 movies.thinkteen.co.uk GET /jscripts/popup_menu.js?ver=1212 HTTP/1.1
10-0 - 0/0/1 . 0.00 44 0 0.0 0.00 0.00 127.0.0.1 vps.thinkteen.co.uk OPTIONS * HTTP/1.0
11-0 - 0/0/1 . 0.00 43 0 0.0 0.00 0.00 127.0.0.1 vps.thinkteen.co.uk OPTIONS * HTTP/1.0
12-0 - 0/0/1 . 0.00 42 0 0.0 0.00 0.00 127.0.0.1 vps.thinkteen.co.uk OPTIONS * HTTP/1.0
13-0 - 0/0/1 . 0.00 41 0 0.0 0.00 0.00 127.0.0.1 vps.thinkteen.co.uk OPTIONS * HTTP/1.0
14-0 - 0/0/1 . 0.00 38 0 0.0 0.00 0.00 127.0.0.1 vps.thinkteen.co.uk OPTIONS * HTTP/1.0
15-0 6026 0/4/4 _ 0.00 16 11931 0.0 0.15 0.15 79.70.53.65 movies.thinkteen.co.uk GET /images/logo.php HTTP/1.1
16-0 - 0/0/1 . 0.00 37 0 0.0 0.00 0.00 127.0.0.1 vps.thinkteen.co.uk OPTIONS * HTTP/1.0

What/where is OPTIONS * HTTP/1.0

Thanks in advance,
Shamil

[cPanelJesse]

OPTIONS is a request method, other methods in HTTP are GET, HEAD, POST, PUT, DELETE, TRACE and CONNECT. There's other protocols that add more (WebDAV). You can deny all methods except those you use by using Apache's rewrite engine, looks something like:

<Directory "/home/user/somedirectory">
RewriteEngine on
RewriteCond %{REQUEST_METHOD} !^(GET|HEAD|POST)$
RewriteRule .* - [F]
</Directory>

[ct2k7]

Thanks Jesse

[jeremy_reliable]

It's a request coming from 127.0.0.1 to the server hostname so something internal to cpanel I presume. Before blocking these requests it would be good to know what is being disabled.. anyone?

[Solokron]

Ditto.


.

It's a request coming from 127.0.0.1 to the server hostname so something internal to cpanel I presume. Before blocking these requests it would be good to know what is being disabled.. anyone?

[Solokron]

Mine appear to accumulate and load down the system. Restarting Apache clears them.

[Solokron]

http://www.w3.org/Protocols/rfc2616/rfc2616-sec9.html section 9.2 covers it.