配置有两种方法如下:
在httpd.conf文件中添加
Deny from all
或者采用rewrite模块后
RewriteEngine on
RewriteCond %{REQUEST_METHOD} ^(OPTIONS)
RewriteRule .* - [F]
添加后重启
验证方法如下:
$telnet 10.*.*.* 80
Trying 10.*.*.*...
Connected to 10.194.177.187.
Escape character is '^]'.
OPTIONS / HTTP 1.1 <输入后,两次回车,返回如下>
HTTP/1.1 200 OK
Date: Tue, 25 Feb 2014 09:09:31 GMT
Server: IBM_HTTP_Server
Allow: GET,HEAD,POST,OPTIONS,TRACE <显示当前方法/漏洞>
Content-Length: 0
Connection: close
Content-Type: text/html
Connection closed by foreign host.