How do I determine if the TRACE routine is implemented on my webserver?
TRACE is a HTTP 1.1 method(see RFCs) and is enabled on our servers. Here’s how you can confirm if trace is enabled ———————————————- • telnet localhost 41280 Trying 127.0.0.1… Connected to localhost. Escape character is ‘^]’. TRACE /banner.html HTTP/1.1 host: zoltar HTTP/1.1 200 OK Server: Netscape-Enterprise/4.1 Date: Tue, 29 Apr 2003 17:04:05 GMT Content-type: message/http Content-length: 46 TRACE /banner.html HTTP/1.1 Host: zoltar —————————————- You can see from the above session that 4.1 sp12 returns a HTTP status 200(ok) to a TRACE request. This indicates that the TRACE method is enabled. Now after loading/configuring the reject_trace plugin, if you send the TRACE request, it would be denied with a “HTTP/1.1 413 Request Entity Too Large” response from the server. This indicates that server has disabled TRACE method after the plugin was configured. Information on implenting the fix can be found at the following site: http://s
