So basically what you're saying is you aren't vulnerable if you turn off your website.

The server configuration to mitigate this is to comment out the whole configuration so there's no server.