We help IT Professionals succeed at work.

How can I disable WebDAV features in apache when using as a proxy

SeaRayNC
SeaRayNC asked
on
Medium Priority
1,223 Views
Last Modified: 2013-11-05
I am using Apache to proxy incoming requests and pass off requests to a portal server. In the portal logs, I am seeing

HTTP Method HEAD not accepted
HTTP Method PROPFIND not accepted

I am using mod_proxy to achieve this. Is there a way I can have apache catch these before passing off to portal server? Again, apache is only a proxy at this point, not serving up any pages.
Comment
Watch Question

Maciej Ssysadmin
CERTIFIED EXPERT

Commented:
So, you may turn webdav off completely, right?
Comment out LoadModule line, which loads webdav module (mod_dav.so). Restart apache after that.

Author

Commented:
how about the mod_dav_fs.so module?

is there a way just to filter out HEAD and PROPFIND methods?

If i turn off completely, what server code will be raised?
Top Expert 2008
Commented:
May be you want to deny all methods except GET and POST?
# may be there's already a wildcard proxy container present
<Proxy *>
    <LimitExcept GET POST>
        Order allow,deny
        deny from all
    </LimitExcept>
</Proxy>

Open in new window

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts

Author

Commented:
Caterham

I think adding the LimitExcept would be preferable for me. Let me try. THis will allow us to use this functinality later, which we intend so I prefer not disabling it completely.

Will this throw a 501 to users who try to access with those methods?
Top Expert 2008

Commented:
No, a 403 forbidden. If you need a 501 and you're on apache 2.2


    <LimitExcept GET POST>
        Redirect 501 /
    </LimitExcept>

Open in new window

Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.