Been trying to turn off HTTP TRACE Method.
mod_rewrite is in place and this has been added to the HTTP.conf.
<IfModule mod_rewrite.c>
RewriteEngine on
RewriteCond %{REQUEST_METHOD} ^TRACE
RewriteRule .* - [F]
</IfModule>
We are still getting a return like this though.
login as: root
[email protected]'s password:
Last login: Thu Jun 29 17:09:12 2006 from c.hsd1.il.comcast.net
root@elladan [~]# echo -e 'TRACE / HTTP/1.0n' | nc xx.xx.xxx 80
HTTP/1.1 400 Bad Request
Date: Thu, 29 Jun 2006 22:21:41 GMT
Server: Apache/1.3.36 (Unix) mod_fastcgi/2.4.2 PHP/4.4.2 mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 FrontPage/5.0.2.2635.SR1.2 mod_ssl/2.8.27 OpenSSL/0.9.8a
Connection: close
Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>400 Bad Request</TITLE>
</HEAD><BODY>
<H1>Bad Request</H1>
Your browser sent a request that this server could not understand.<P>
The request line contained invalid characters following the protocol string.<P>
<P>
<HR>
<ADDRESS>Apache/1.3.36 Server at xxx.xx.xxx Port 80</ADDRESS>
</BODY></HTML>
We are getting a 400 error message, but it is still return a lot of information. Does this look right? Any advice appreciated.
mod_rewrite is in place and this has been added to the HTTP.conf.
<IfModule mod_rewrite.c>
RewriteEngine on
RewriteCond %{REQUEST_METHOD} ^TRACE
RewriteRule .* - [F]
</IfModule>
We are still getting a return like this though.
login as: root
[email protected]'s password:
Last login: Thu Jun 29 17:09:12 2006 from c.hsd1.il.comcast.net
root@elladan [~]# echo -e 'TRACE / HTTP/1.0n' | nc xx.xx.xxx 80
HTTP/1.1 400 Bad Request
Date: Thu, 29 Jun 2006 22:21:41 GMT
Server: Apache/1.3.36 (Unix) mod_fastcgi/2.4.2 PHP/4.4.2 mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 FrontPage/5.0.2.2635.SR1.2 mod_ssl/2.8.27 OpenSSL/0.9.8a
Connection: close
Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>400 Bad Request</TITLE>
</HEAD><BODY>
<H1>Bad Request</H1>
Your browser sent a request that this server could not understand.<P>
The request line contained invalid characters following the protocol string.<P>
<P>
<HR>
<ADDRESS>Apache/1.3.36 Server at xxx.xx.xxx Port 80</ADDRESS>
</BODY></HTML>
We are getting a 400 error message, but it is still return a lot of information. Does this look right? Any advice appreciated.
