Re: RemoteAddrValve and RemoteHostValve

2009-03-02 Thread Zak Mc Kracken
Thanks Gregor, that's very interesting for production environments. I'll try it. Cheers. M. Gregor Schneider wrote: On Mon, Mar 2, 2009 at 11:25 AM, Zak Mc Kracken wrote: Gregor Schneider wrote: you've been asking the valve-stuff because you want to limit the access to

Re: RemoteAddrValve and RemoteHostValve

2009-03-02 Thread Zak Mc Kracken
Gregor Schneider wrote: you've been asking the valve-stuff because you want to limit the access to requests coming from localhost only? Yep! why then not make tomcat listen on localhost only? configuration for that's a walk in the park... My Tomcat is serving a number of webapps, I want t

Re: RemoteAddrValve and RemoteHostValve

2009-03-01 Thread Zak Mc Kracken
Gregor wrote: marc, do i understand you correct that you only whant to accept requests from "localhost"? I have a Java web application that computes some data from an existing Java-based infrastructure and output it as simple plain text. The output is intended to be consumed by other PHP app

Re: RemoteAddrValve and RemoteHostValve

2009-03-01 Thread Zak Mc Kracken
Thanks again. André Warnier wrote: It would in my view make a lot more sense to have a single Remote Access Valve to which one could specify, in "allow" or "deny", a hostname AND/OR an IP address expression. Like deny=".*\.badguys.com,10\.20\.30\.0" /> That's how it works in Apache httpd, and

Re: RemoteAddrValve and RemoteHostValve

2009-02-28 Thread Zak Mc Kracken
Thank you all for replies and detailed explanation. Now I understand what's happening. My specific problem is restrict a single web application to clients coming from localhost only. This was not working (everything blocked): I am using a Mac and, after your replies, I tried to see wh

Re: RemoteAddrValve and RemoteHostValve

2009-02-28 Thread Zak Mc Kracken
Gregor Schneider wrote: What in the documentation (http://tomcat.apache.org/tomcat-6.0-doc/config/valve.html) is the part you don't understand? Thanks for replying. Maybe it's me, but what I gather from the documentation is that it's not possible to combine the two filters as I want, i.e.: tell

Re: RemoteAddrValve and RemoteHostValve

2009-02-28 Thread Zak Mc Kracken
Gregor Schneider wrote: What in the documentation (http://tomcat.apache.org/tomcat-6.0-doc/config/valve.html) is the part you don't understand? Thanks for replying. Maybe it's me, but what I gather from the documentation is that it's not possible to combine the two filters as I want, i.e.: tel

RemoteAddrValve and RemoteHostValve

2009-02-27 Thread Zak Mc Kracken
Hi all, I'd like to filter incoming requests with this criterion: if it's www.somewhere.com -> OK else if it's 1.2.3.4 -> OK else -> KO Is it possible to do that by combining RemoteHostValve and RemoteAddrValve? How? I simply tried to write them one after another, but all is blocked, it seems t