On 07/20/2011 10:39 AM, Aaron Freeman wrote:
> I'd like to disabled the HTTP CONNECT method.   I don't know the best
> way to do that, but I tried this and it's not working:
>
> <resin:Forbidden regexp='.*'>
> <resin:IfMethod value="CONNECT"/>
> </resin:Forbidden>
>
> The request is passed on and I receive a 200 OK response when I telnet
> and test the CONNECT.
>
> What is the most efficient way to get Resin to deny those requests?

That config works for me. (You don't need the regexp if you're matching 
everything, but it doesn't matter for this issue.)

There is the <resin:Forbidden> tag?

-- Scott

> Thanks,
>
> Aaron
>
>
> _______________________________________________
> resin-interest mailing list
> resin-interest@caucho.com
> http://maillist.caucho.com/mailman/listinfo/resin-interest
>



_______________________________________________
resin-interest mailing list
resin-interest@caucho.com
http://maillist.caucho.com/mailman/listinfo/resin-interest

Reply via email to