Options * Http/1.0

[therealgtron]

would the following block all of the 127.0.0.1 OPTIONS * HTTP/1.0 i see?

<Directory "/">
RewriteEngine on
RewriteCond %{REQUEST_METHOD} !^(GET¦HEAD¦POST)$
RewriteRule .* - [F]
</Directory>

thanks!

[Caterham]

That is a pretty good example when not to use mod_rewrite because it's inefficient and would be overridden by other per-directory rules by default. Use the limitexcept containers instead, but within <Location /> to override prior per-directory settings.

<Location />
<LimitExcept GET HEAD POST>
Order Allow,Deny
deny from all
</LimitExcept>
</Location>