TRACE disable problem with AIX

[ian acces <ian () acces co jp>]

Following a number of alerts for WEB-MISC TRACE attempts, I decided to
disable the TRACE command on our webservers using the mod_rewrite workaround
described by Whitehats, namely inserting:

RewriteEngine on
RewriteCond %{REQUEST_METHOD} ^TRACE
RewriteRule .* - [F]

in httpd.conf.

This has worked on the linux server I tested it on, returning a 403
forbidden, as I hoped, but refuses to work on an AIX 5.1 system. Mod_rewrite
is installed and enabled but TRACE requests continue to mirror the submitted
data rather than the 403 I want to see.

Has anyone else had this problem?

Thanks

Regards

Ian Masters



-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users