Return-Path: 
 <tomcat-user-return-126435-apmail-jakarta-tomcat-user-archive=jakarta.apache.org@jakarta.apache.org>
Delivered-To: apmail-jakarta-tomcat-user-archive@www.apache.org
Received: (qmail 70021 invoked from network); 11 May 2005 06:18:54 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199)
  by minotaur.apache.org with SMTP; 11 May 2005 06:18:54 -0000
Received: (qmail 17675 invoked by uid 500); 11 May 2005 06:21:43 -0000
Delivered-To: apmail-jakarta-tomcat-user-archive@jakarta.apache.org
Received: (qmail 17650 invoked by uid 500); 11 May 2005 06:21:42 -0000
Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
List-Help: <mailto:tomcat-user-help@jakarta.apache.org>
List-Post: <mailto:tomcat-user@jakarta.apache.org>
List-Id: "Tomcat Users List" <tomcat-user.jakarta.apache.org>
Reply-To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
Delivered-To: mailing list tomcat-user@jakarta.apache.org
Received: (qmail 17633 invoked by uid 99); 11 May 2005 06:21:42 -0000
X-ASF-Spam-Status: No, hits=0.0 required=10.0
	tests=
X-Spam-Check-By: apache.org
Received-SPF: pass (hermes.apache.org: local policy)
Received: from mail.stadt-nw.de (HELO smtp-relay.stadt-nw.de) (194.25.29.86)
  by apache.org (qpsmtpd/0.28) with ESMTP; Tue, 10 May 2005 23:21:41 -0700
Received: from localhost (localhost.localdomain [127.0.0.1])
	by smtp-relay.stadt-nw.de (Postfix) with ESMTP id E2FF013F69
	for <tomcat-user@jakarta.apache.org>; Wed, 11 May 2005 09:00:03 +0200 (CEST)
Received: from smtp-relay.stadt-nw.de ([127.0.0.1])
 by localhost (smtp-relay.stadt-nw.de [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 23071-02 for <tomcat-user@jakarta.apache.org>;
 Wed, 11 May 2005 09:00:02 +0200 (CEST)
Received: from voyager (unknown [192.100.46.124])
	by smtp-relay.stadt-nw.de (Postfix) with SMTP id 1068413F75
	for <tomcat-user@jakarta.apache.org>; Wed, 11 May 2005 09:00:02 +0200 (CEST)
Received: from  ([192.100.46.108]) by voyager; Wed, 11 May 2005 08:18:08 +0200 (Westeurop�ische Sommerzeit)
Received: by mail.stadt-nw.de with Internet Mail Service (5.5.2653.19)
	id <J5APQP9C>; Wed, 11 May 2005 08:17:24 +0200
Message-ID: <57F27E97615AD411BE2D00010208705003372F29@mail.stadt-nw.de>
From: "Altrock, Jens" <Jens.Altrock@STADT-NW.DE>
To: 'Tomcat Users List' <tomcat-user@jakarta.apache.org>
Subject: AW: Restrict access to webapps for IPs
Date: Wed, 11 May 2005 08:17:20 +0200
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Virus-Checked: Checked
X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N

Ok tried it again.. first some more information:
I am using Tomcat 5.0.28 on Redhat Fedora Core 3, installed in
/usr/local/tomcat

I created a XML file called <application>.xml in
/usr/local/tomcat/conf/Catalina/localhost
where <application> is the name of the webapp. That worked so far. The =
file
consisted just of a few lines:

<Context path=3D"/NetAdmin" =
docBase=3D"${catalina.home}/webapps/NetAdmin"
        debug=3D"0" privileged=3D"true">
  <Valve className=3D"org.apache.catalina.valves.RemoteAddrValve"
allow=3D"192.100.46.*,172.16.*.*,194.25.29.*,127.0.0.1"/>
</Context>

I have to mention that I did neither write that app nor know much about =
it
anyway.. it uses a JDBC connection
to a mysql database to write data to that db. But after creating that =
config
file mentioned above, the
JDBC driver didn't work anymore...

Anyone can help me with that?

Regards,

Jens

> -----Urspr=FCngliche Nachricht-----
> Von: Lutz Zetzsche [mailto:Lutz.Zetzsche@sea-rescue.de]
> Gesendet: Dienstag, 10. Mai 2005 16:24
> An: Tomcat Users List
> Betreff: Re: Restrict access to webapps for IPs
> 
> 
> Hi Jens,
> 
> Altrock, Jens schrieb:
> > Hm... won't work :(
> >
> > I added to noe of the apps in 
> webapps/name_of_app/WEB-INF/web.xml the
> > following:
> >
> > <Valve className=3D"org.apache.catalina.valves.RemoteAddrValve"
> > allow=3D"192.100.46.*"/>
> >
> > right after the <web-app> tag in the xml file.
> > But people can access that application from the internet anyway...
> 
> You have put the Valve element into the wrong file resp. 
> place. It cannot
> be nested into the <web-app> element and cannot be placed in 
> the web.xml.
> You have to nest it into a <engine>, <host> oder <context> element.
> 
> In your case, you have to nest it into the <context> element 
> because you
> want to apply the filter rule to a web application which is 
> equivalent to
> the <context> element in Tomcat terms.
> 
> You should have a look at one of the links I mentioned to 
> find the right
> place for the Valve element:
> 
> http://jakarta.apache.org/tomcat/tomcat-5.5-doc/config/context.html
> 
> Try one of these options offered on this page (refers to 
> Tomcat version 5.5):
> 
> * in individual files (with a ".xml" extension) in the
> $CATALINA_HOME/conf/[enginename]/[hostname]/ directory
> * if the previous file was not found for this application, in 
> individual
> file at /META-INF/context.xml inside the application files
> 
> 
> Best wishes
> 
> Lutz
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> 
###########################################
Diese Nachricht wurde von F-Secure Anti-Virus gescannt.

This message has been scanned by F-Secure Anti-Virus.


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org