Lots of PCI Compliance and vulnerability scan vendors will complain about TRACE and TRACK methods being enabled on your server. Since most providers run Nessus, you’ll see this fairly often. Here’s the rewrite rules to add:
RewriteEngine on
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
RewriteRule .* - [F]
These directives will need to be added to each VirtualHost.
Further reading:
Apache Debugging Guide
Entries (RSS)
For apache version 1.3.34 (or later 1.3.x versions), or apache 2.0.55 (or later), this has been made easy. Just add the line TraceEnable off
[...] always been a bit of a challenge to disable TRACE and TRACK methods with Plesk. The only available options were to create a ton of [...]