HTTP TRACE Support -- iis security

Richard
7/31/2003 9:11:21 AM

I have an issue with "HTTP Trace Support" being enabled. I
have found documents that state "Use URL Scan" to fix the
problem. I do not want to use URL Scan due to the fact
that it caused more problems then it fixed. I keep running
into the refrence of "RFC 2516" regarding "HTTP Trace
Support", but I have been unable to locate the "RFC 2516".
Does anyone know how to disable "HTTP TRACE" support

Alessandro Perilli
7/31/2003 6:31:15 PM

[quoted text, click to view]

HTTP Trace is described on RFC2616 and not RFC2516:
http://www.ietf.org/rfc/rfc2616.txt

AFAIK using URL Scan is the only way to disable HTTP trace in IIS. If URL
Scan give you many problems you could try a free variant not produced by
MS:
http://www.kodeit.org/tools/iisshield.htm

--

Alessandro Perilli
Security Consultant / Trainer

MCT - MCSE 2000 SECURITY - LINUX+
CCSI - CCSE 2000 - CCSE+ NG
CCNA - CIWP - CIWSA - CCA XP

iis security : HTTP TRACE Support