Apache 2.xx | limit and limitexcept directives

Greetings -

I'm trying to prevent CONNECT 1.3.3.7:1337 attempts on my server, and
a bit of searching suggests that making use of LIMIT and LIMITEXCEPT
in my httpd.conf file might help.

My question concerns syntax, and logic sequencing of these directives
in my httpd.conf file. Here is what I have at present (first attempt
to embed the LIMIT and LIMITEXCEPT directives):

<Directory "/main/docs/directory/htdocs">
<Limit GET POST OPTIONS PROPFIND>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS PROPFIND>
Order deny,allow
Deny from all
</LimitExcept>
Options Indexes FollowSymLinks
AllowOverride None
Order allow,deny
Allow from all
</Directory>

Any obvious mistakes? I'm wondering if the Oder allow, deny and Allow
from all statements in the next to last to lines defeat the limit and
limitexcept controls. If so, what do I need to tweak?

Thanks in advance...

>Any obvious mistakes? I'm wondering if the Oder allow, deny and Allow
>from all statements in the next to last to lines defeat the limit and
>limitexcept controls. If so, what do I need to tweak?
>
>Thanks in advance...

Nothing, eh? Too bad - find precious few examples of this out there on
the web.

Ah well...

* cooch17@NOSPAMverizon.net wrote:

>
>>Any obvious mistakes? I'm wondering if the Oder allow, deny and Allow
>>from all statements in the next to last to lines defeat the limit and
>>limitexcept controls. If so, what do I need to tweak?
>>
>>Thanks in advance...
>
> Nothing, eh? Too bad - find precious few examples of this out there on
> the web.
>
> Ah well...

This doesn't work, because the directory container doesn't apply on CONNECT
(how could it).
You could use mod_rewrite for that. Put

RewriteCond %{REQUEST_METHOD} =CONNECT
RewriteRule ^ - [F]

in global server context (untested).

nd
--
s s^saaaaaoaaaoaaaaooooaaoaaaomaaaa a alataa aaoat a a
a maoaa a laoata a oia a o a m a o alaoooat aaool aaoaa
matooololaaatoto aaa o a o ms;s;\s;s;g;y;s;:;s;y#mailto: #
\51/\134\137| http://www.perlig.de #;print;# > nd@perlig.de