If you are using Tomcat, perhaps you could use Valve to protect a given context of your application I think :
<Context path="/solr/dataimport" docBase="${catalina.home}/server/solr/dataimport" privileged="true" > <Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="127\.0\.0\.1" /> </Context> I did not test this, you have to tweak it ;) Ludovic ----- Jouve France. -- View this message in context: http://lucene.472066.n3.nabble.com/Reject-URL-requests-unless-from-localhost-for-dataimport-tp3106804p3107384.html Sent from the Solr - User mailing list archive at Nabble.com.