Custom config via /etc/apache2/imscp/[domain.com].conf or .htaccess not working

**bglaessn** · May 5th 2017

Hi folks,

I am trying to disable HTTP OPTIONS for security reasons in i-MSCP 1.3.16 (Build: 20170107).

Short explanation:

If I drop a

Code

# curl -i -X OPTIONS http://139.1.x.xHTTP/1.1 200 OKDate: Fri, 05 May 2017 10:25:16 GMTServer: ApacheStrict-Transport-Security: max-age=31536000; includeSubDomainX-Frame-Options: sameoriginX-Content-Type-Options: nosniffAllow: GET,HEAD,POST,OPTIONSX-Frame-Options: sameoriginContent-Length: 0Content-Type: text/html

The "Allow" for OPTIONS should not be displayed.

So I added the following lines to /etc/apache2/imscp/mydomain.com.conf

Code

and reloaded my Apache.

Additionally, I added a .htaccess with the same content in my document root.

Noting changed so far.

Any help would be appreciated. Thanx !
BG

**Nuxwin** · May 5th 2017

Quote from bglaessn

OnRewriteCond

**bglaessn** · May 11th 2017

Pardon ?
Could you please be more specific ?

**Nuxwin** · May 11th 2017

Quote from bglaessn

Pardon ?
Could you please be more specific ?

There is not such OnRewriteCond directive

**bglaessn** · Jun 1st 2017

Hy,

I see... So there is no way to implement

TraceEnable Off

in i-mscp, also ??

Regards

Share