Well for a start you need to have the mod_rewrite module loaded.
See: http://httpd.apache.org/docs-2.0/mod/mod_rewrite.html
Kind Regards,
Paul Rochford
-----Original Message-----
From: nessus-bounces@list.nessus.org
[mailto:nessus-bounces@list.nessus.org] On Behalf Of Deva
Sent: Friday, June 17, 2005 2:04 AM
To: William Webb; nessus@list.nessus.org
Subject: Re: Apache Rewrite engine warning
Hi
Can you help me, were you will add these lines to disable TRACE & TRACK
method in Apche 1.3.x versions & 2.x verions
RewriteEngine on
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK) RewriteRule .* - [F]
Regards,
Devasundar.A
Sify LTD
----- Original Message -----
From: "William Webb" <wwebb@bluebottle.com>
To: <nessus@list.nessus.org>
Sent: Friday, June 17, 2005 5:02 AM
Subject: Apache Rewrite engine warning
The nessus scan suggest I add the following into the apache host
containers:
RewriteEngine on
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK) RewriteRule .* - [F]
In older versions of Apache, that worked OK, when I do that with the
new version (configured for Mandrake) none of the webpages will
operate. Does the new version of Apace alreay address this problem by
default or what is the fix? Thanks.
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
********** DISCLAIMER **********
Information contained and transmitted by this E-MAIL is proprietary to
Sify Limited and is intended for use only by the individual or entity to
which it is addressed, and may contain information that is privileged,
confidential or exempt from disclosure under applicable law. If this is
a forwarded message, the content of this E-MAIL may not have been sent
with the authority of the Company. If you are not the intended
recipient, an agent of the intended recipient or a person responsible
for delivering the information to the named recipient, you are notified
that any use, distribution, transmission, printing, copying or
dissemination of this information in any way or in any manner is
strictly prohibited. If you have received this communication in error,
please delete this mail & notify us immediately at admin@sifycorp.com
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
