HTTP Methods Probe

OPTIONS + HEAD/GET/POST allow probes — no body abuse, private hosts blocked.