Disable tracking and tracing in apache

Question

I have Apache 2.2.22 on Linux Suse. I want to disable track & track in Apache and use 1- TraceEnable Off and 2- RewriteEngine in

RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK) RewriteRule .* - [F] . 

but 2 ways do not work.

Answer 1

In Apache2, you can simply add TraceEnable Off to httpd.conf (end of file)

 TraceEnable Off 

To check if tracing is enabled, you can use Curl:

 curl -v -X TRACE http://www.yourserver.com 

Answer 2

You need to put TraceEnable Off in httpd.conf

Answer 3

To disable these methods, add the following lines for each virtual host in your configuration file:

 RewriteEngine on RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK) RewriteRule .* - [F] 

nessus said)))

Answer 4

For Apache HTTPD 2.4: Require not method TRACE TRACK

See Require Directive

Answer 5

If a module is not installed that supports TRACK, TRACK is not supported by default in Apache, so you must have a directive:

 TraceEnable Off 

However, for the approach with belt and suspender, also add:

 RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK) [NC] RewriteRule ^.* - [F] 

This will disable TRACE and TRACK.