How do I detect a web dav request?

'event disable all' would prevent all further events from being run for the duration of the TCP connection. But reject should have the same effect as TMM will send the client a TCP reset and close the connection. I guess you could do both to be really complete:

when HTTP_REQUEST {
    Send a TCP reset for WebDav methods
   switch [HTTP::method] {
      "MOVE" -
      "COPY" -
      "LOCK" -
      "UNLOCK" -
      "PROPFIND" -
      "PROPPATCH" -
      "MKCOL" {
         reject
         event all disable
      }
   }
}

Aaron