Support

Hi guys,
I'm running on Apache version 2.2.31 and with Let's Encrypt SSL certificate to have https on all sites.
Creating .htaccess with Admin Tools I thought was a good thing to set:
- Disable HTTP methods TRACE and TRACK (protect against XST): Yes

But saving and creating the .htaccess file I have back:

Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.
Please contact the server administrator, [email protected] and inform them of the time the error occurred, and anything you might have done that may have caused the error.
More information about this error may be available in the server error log.
Additionally, a 500 Internal Server Error error was encountered while trying to use an ErrorDocument to handle the request.

I red here: https://www.akeebabackup.com/support/admin-tools/22847-disable-http-methods-trace-and-track.html#p126052
that this should be related to olders Apache versions, but not from 2.2 version...

So, please, How can I fix this ?
And, in special, Is "Disable HTTP methods TRACE and TRACK" still a good thing to do ?!? 

Hi Davide,
many thanks for your answer. What about my second question:

A - Is "Disable HTTP methods TRACE and TRACK" still a good thing to do ?!?

B - In case of yes, What is the question / request I can do to my Server provider ?
Ask about a "TRACE and TRACK" feature ?!?

Hi Davide,
from my Server provider (A2hosting) I had abck this suggestion:

You can add the following to your .htaccess file to forbid unacceptable requests:

RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK|OPTIONS|HEAD)
RewriteRule .* - [F]

Is it anything can be added in Admin Tools features ?
Is it anything I can add through Admin Tools ?

Many Thanks for support...

Hi Davide,
so, I have to just manually add those rules inside the Htaccess Maker in the field "Custom rules on top of .htaccess file".

I have also to set:
- Disable HTTP methods TRACE and TRACK (protect against XST): Yes
or not ?!?

Many Thanks for help

Hi Davide,
many thanks, the suggestion received from my Server provider seem to work...

This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.