Date: Sep 11, 2012

How to Disable TRACE and TRACK Methods in Apache Web Server

Scenario:

For security purposes you might want to disable Trace and Track methods on your Apache Web Server.

Add the following to httpd.conf file:

RewriteEngine on
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
RewriteRule .* - [F]


-OR-


With newer versions of Apache 1.3.34 or later or 2.0.55 or later, you can just add the following line

TraceEnable off

---