Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (herse.apache.org: local policy)
From: Markus =?iso-8859-1?q?Sch=F6nhaber?=
 <mailing-tomcat-user@schoenhaber.de>
Reply-To: users@tomcat.apache.org
To: "Tomcat Users List" <users@tomcat.apache.org>
Subject: Re: Securing Tomcat Article for Review
Date: Tue, 9 Jan 2007 19:36:23 +0100
User-Agent: KMail/1.9.5
References: <FB0F60DB-4456-45F1-9E97-665AA90AF7F6@googlemail.com>
 <200701091812.51956.mailing-tomcat-user@schoenhaber.de>
 <a2d59f0d0701090955m13d4bddaq5ba4eddf75531f9e@mail.gmail.com>
In-Reply-To: <a2d59f0d0701090955m13d4bddaq5ba4eddf75531f9e@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200701091936.23389.mailing-tomcat-user@schoenhaber.de>

Did you read the article that is subject to this thread?

Gregor Schneider wrote:

> putting up apache in front of tomcat usually is not done due to
> security-reasons. however, doing so won't do any harm if you know what
> you're doing... ;)

Whatever you're doing, it's always a good idea to know what you're doing.
The question why someone "usually" puts httpd in front of Tomcat wasn't 
subject of this sub-thread.

> the only reason putting up apache in front usually is to serve static
> content when running a high-load-web-app. besides, you can do quite
> some tricky stuff regarding url-rewriting and so on which is quite
> difficult to accomplish when using tomcat only.

"Usually" "the only reason"? How do you know?
As I said before, what answers might be given to the question "why" wasn't 
what I was talking about.

> however, if somebody wants to run tomcat on port 80, on unix, this can
> easily be achieved with the jsvc-tool (see
> http://tomcat.apache.org/tomcat-5.5-doc/setup.html), on windows it's
> not an issue anyway.

Which is another among multiple ways the article presents as possibilities to 
make Tomcat accessible via port 80. Nobody doubted that.

I don't think I understand how your post relates to mine.

Regards
  mks

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org