title: How can I stop people accessing a plone server via webdav?
body: <p>I would like to know how I can disable webdav access to my <code>plone4 server</code>.  The server is configured to block all direct http access to the normal zope client ports (8080, and 8081), and it is impossible to access plone externally via the <code>http://ploneservername:8080</code> address.  This is intended as we want all client connections to be encrypted.  I have configured it so that all access has to be proxied via an <code>apache2</code> service running on the same server that listens/terminates SSL on port 443.  The standard zope listening ports (8080, 8081, 8100) are only configured to listen on the 127.0.0.1 address, they are not available from outside the box.  The apache service proxies all <code>SSL/443</code> traffic to <code>127.0.0.1:8080</code> which is what the zope client is listening on.</p>
  
  <p>The only port that external clients can connect to on the box is 443 which is served by apache, and which proxies to the http/8080 address (via proxypass directive using the virtualhostmonster).  This all works perfectly.</p>
  
  <p>The problem is that webdav clients are still able to connect to the box via <code>SSL/port443</code> and successfully authenticate and upload/download files.  This is the case even though the webdav port hasn't been opened / configured anywhere in the plone config files, and the server is not listening for webdav connections when viewed through netstat -ap.  I have been able to connect using 2 different webdav clients (bitkinex and win7 built-in), using the <code>https://ploneserveraddress URL</code>.  I was under the impression that webdav should only be available if it's been explicitly enabled via the zope instance sections of the config file.</p>
  
  <p>Is there a way to completely shut down webdav access?  Simply ommiting it from the config files hasn't stopped us being able to connect using this method when going in via <code>apache/443/SSL</code>.  Any help would be appreciated.  Thanks.</p>