tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 12249] - tomcat binds to IP addresses it is configured not to bind to
Date Tue, 03 Sep 2002 17:36:39 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=12249>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=12249

tomcat binds to IP addresses it is configured not to bind to

ruvinsky@yahoo.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|WORKSFORME                  |



------- Additional Comments From ruvinsky@yahoo.com  2002-09-03 17:36 -------
Remy, I hope you don't mind that I reopen this bug, for my reasoning below.  In 
a separate email thread, I believe you mentioned that the Coyote connector is 
NOT supported/recommended for Tomcat 4.0.4, and to stick with HttpConnector 
when running 4.0.4 in a production environment.  If Tomcat binds to any IP 
address, regardless of what it is configured to do, this sounds like a major 
[security] problem -- perhaps one that the solution for shouldn't be to just 
use the newer [non-production quality] Tomcat 4.1.x.

Graham, can you specify how to reproduce the problem?  Also, what Connector 
settings do you have in your server.xml?  Perhaps I or someone else can look 
into what the bug is exactly and post a patch?

Thanks,
Eddie

--
To unsubscribe, e-mail:   <mailto:tomcat-dev-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-dev-help@jakarta.apache.org>


Mime
View raw message