Re: [Resin-interest] Disabling HTTP Methods

2011-07-21 Thread Aaron Freeman
I could use some help on this, even if it's just a hint or some ideas what else to try. Thanks, Aaron I'd like to disabled the HTTP CONNECT method. I don't know the best way to do that, but I tried this and it's not working: resin:Forbidden regexp='.*' resin:IfMethod value=CONNECT/

Re: [Resin-interest] Disabling HTTP Methods

2011-07-21 Thread Scott Ferguson
On 07/20/2011 10:39 AM, Aaron Freeman wrote: I'd like to disabled the HTTP CONNECT method. I don't know the best way to do that, but I tried this and it's not working: resin:Forbidden regexp='.*' resin:IfMethod value=CONNECT/ /resin:Forbidden The request is passed on and I receive a 200

Re: [Resin-interest] Disabling HTTP Methods

2011-07-21 Thread Aaron Freeman
On 7/21/2011 12:27 PM, Scott Ferguson wrote: On 07/20/2011 10:39 AM, Aaron Freeman wrote: I'd like to disabled the HTTP CONNECT method. I don't know the best way to do that, but I tried this and it's not working: resin:Forbidden regexp='.*' resin:IfMethod value=CONNECT/ /resin:Forbidden

Re: [Resin-interest] Disabling HTTP Methods

2011-07-21 Thread Scott Ferguson
On 07/21/2011 02:01 PM, Aaron Freeman wrote: On 7/21/2011 12:27 PM, Scott Ferguson wrote: On 07/20/2011 10:39 AM, Aaron Freeman wrote: I'd like to disabled the HTTP CONNECT method. I don't know the best way to do that, but I tried this and it's not working: resin:Forbidden regexp='.*'

Re: [Resin-interest] Disabling HTTP Methods

2011-07-21 Thread Aaron Freeman
On 7/21/2011 4:12 PM, Scott Ferguson wrote: On 07/21/2011 02:01 PM, Aaron Freeman wrote: On 7/21/2011 12:27 PM, Scott Ferguson wrote: On 07/20/2011 10:39 AM, Aaron Freeman wrote: I'd like to disabled the HTTP CONNECT method. I don't know the best way to do that, but I tried this and it's

Re: [Resin-interest] Disabling HTTP Methods

2011-07-21 Thread Scott Ferguson
On 07/21/2011 02:28 PM, Aaron Freeman wrote: On 7/21/2011 4:12 PM, Scott Ferguson wrote: On 07/21/2011 02:01 PM, Aaron Freeman wrote: On 7/21/2011 12:27 PM, Scott Ferguson wrote: On 07/20/2011 10:39 AM, Aaron Freeman wrote: I'd like to disabled the HTTP CONNECT method. I don't know the best

Re: [Resin-interest] Disabling HTTP Methods

2011-07-21 Thread Eric J. Bowman
Aaron Freeman wrote: You are able to get it to throw an appropriate HTTP 403? Actually, the appropriate response would be 405, Method Not Allowed. -Eric ___ resin-interest mailing list resin-interest@caucho.com