On 10/01/2007 03:30 PM, Joshua Slive wrote: > On 10/1/07, Jim Jagielski <[EMAIL PROTECTED]> wrote: > >> I know Roy's already reported the proxy error as bogus, but I think >> the OPTIONS * BUGZ report is also bogus. As a test, I assumed that >> both www.apache.org and apache.webthing.com are reasonably configured >> servers: > > www.apache.org is using a config built from the 2.0 default, where > <Directory /> was not restricted. To hit the (alleged) bug, you'd need > to test on a server using the 2.2 default: > <Directory /> > Order deny,allow > Deny from all > </Directory>
I have done a test on 2.2.x with the above setting: telnet 192.168.2.4 80 Trying 192.168.2.4... Connected to 192.168.2.4. Escape character is '^]'. OPTIONS * HTTP/1.1 Host: 192.168.2.4 HTTP/1.1 200 OK Date: Mon, 01 Oct 2007 14:43:11 GMT Server: Apache/2.2.7-dev (Unix) mod_ssl/2.2.7-dev OpenSSL/0.9.8d DAV/2 Allow: GET,HEAD,POST,OPTIONS,TRACE Content-Length: 0 Content-Type: text/plain No problem. Regards Rüdiger
