Re: [mod-security-users] filter http-request trace

[<iv...@we...>]

> I have a problem with filtering the http-request TRACE. The HEAD and OPTIONS request is
> filtered correctly, but it is not possible to filter TRACE requests. Is an error in my
> config file or is it not possible to filter TRACE?

   It isn't possible at the moment. Apache handles TRACE before the request reaches
mod_security. That could possibly change in a future release, but in the meantime you can
use mod_rewrite to filter out TRACE.

Bye,
Ivan