disable mod_rewrite and put 

TraceEnable off

in the apache config 


-------------- Original message ----------------------
From: SUBSCRIBE Doug <[log in to unmask]>
>
> I just got a vulnerability report on my 3000. I got dinged for haveing a genric 
> agent name on SNMP, easy fix. I also got dinged for having mod_rewrite and 
> HTTP trace on Apache both enabled. From what I can find I need mod_rewrite 
> if I want to disable trace.  Anyone know of a way to disable both.
> Apache version is 1.3.31.
> 
> 
> 
> tia-doug
> 
> * To join/leave the list, search archives, change list settings, *
> * etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *