Skip to main content
  1. Posts/

Apache: Disable TRACE and TRACK methods

··60 words·1 min·

Lots of PCI Compliance and vulnerability scan vendors will complain about TRACE and TRACK methods being enabled on your server. Since most providers run Nessus, you’ll see this fairly often. Here’s the rewrite rules to add:

RewriteEngine on
RewriteRule .* - [F]

These directives will need to be added to each VirtualHost.

Further reading:

Apache Debugging Guide