Return-Path: 
 <users-return-191467-apmail-tomcat-users-archive=tomcat.apache.org@tomcat.apache.org>
Delivered-To: apmail-tomcat-users-archive@www.apache.org
Received: (qmail 14102 invoked from network); 10 Feb 2009 15:35:27 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 10 Feb 2009 15:35:27 -0000
Received: (qmail 13411 invoked by uid 500); 10 Feb 2009 15:35:15 -0000
Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org
Received: (qmail 13385 invoked by uid 500); 10 Feb 2009 15:35:15 -0000
Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@tomcat.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@tomcat.apache.org>
List-Post: <mailto:users@tomcat.apache.org>
List-Id: <users.tomcat.apache.org>
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Delivered-To: mailing list users@tomcat.apache.org
Received: (qmail 13374 invoked by uid 99); 10 Feb 2009 15:35:15 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 10 Feb 2009 07:35:15 -0800
X-ASF-Spam-Status: No, hits=-0.0 required=10.0
	tests=SPF_HELO_PASS,SPF_PASS,STOX_REPLY_TYPE
X-Spam-Check-By: apache.org
Received-SPF: pass (nike.apache.org: domain of compukat@videotron.ca
 designates 24.201.245.36 as permitted sender)
Received: from [24.201.245.36] (HELO relais.videotron.ca) (24.201.245.36)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 10 Feb 2009 15:35:06 +0000
MIME-version: 1.0
Content-transfer-encoding: 7BIT
Content-type: text/plain; format=flowed; charset=iso-8859-1;
 reply-type=original
Received: from michel ([24.202.165.131]) by VL-MH-MR001.ip.videotron.ca
 (Sun Java(tm) System Messaging Server 6.3-4.01 (built Aug  3 2007; 32bit))
 with SMTP id <0KEU0067DWLXAQQ0@VL-MH-MR001.ip.videotron.ca> for
 users@tomcat.apache.org; Tue, 10 Feb 2009 10:34:45 -0500 (EST)
Message-id: <BA79CD90430D463E94E13938C95A24B9@michel>
From: michel <compukat@videotron.ca>
To: Tomcat Users List <users@tomcat.apache.org>
References: <AD898F3565C444EBB8E40EAC8487A182@michel>
 <0AAE5AB84B013E45A7B61CB66943C17215B62596EC@USEA-EXCH7.na.uis.unisys.com>
Subject: Re: Still trying to get Tomcat 6 to work
Date: Tue, 10 Feb 2009 10:34:56 -0500
X-Priority: 3
X-MSMail-priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
X-Antivirus: avast! (VPS 081127-0, 11/27/2008), Outbound message
X-Antivirus-Status: Clean
X-Virus-Checked: Checked by ClamAV on apache.org

Chuck,

I got this info from my hosting tech guy

"Ah, looking in the qsys account, I can see what you're doing. You're trying
to bind to port 8080 for the entire server, on top of everyone else's web
servers! It's a good job the existing httpds prevented you from doing this!"




----- Original Message ----- 
From: "Caldarale, Charles R" <Chuck.Caldarale@unisys.com>
To: "Tomcat Users List" <users@tomcat.apache.org>
Sent: Tuesday, February 10, 2009 10:28 AM
Subject: RE: Still trying to get Tomcat 6 to work


> From: michel [mailto:compukat@videotron.ca]
> Subject: Re: Still trying to get Tomcat 6 to work
>
> Problem solved!

Security hole opened!  (Not really, but you tried.)

> <Connector address="91.203.57.197" port="8080"

That didn't "solve" the problem, it merely masked it.  By specifying a 
particular IP address, you're making Tomcat listen to *only* that one IP 
address, regardless of what's configured for your TCP/IP stack.  You still 
appear to have something else grabbing 0.0.0.0:8080, and you should find out 
what that is.

> <Server address="91.203.57.197" port="8005" shutdown="SHUTDOWN">

You just tried to open your Tomcat up to shutdown requests issued from 
*anywhere*.  Luckily, Tomcat is smarter than that, and doesn't honor the 
address attribute on the <Server> element.  It will listen to shutdown 
requests only on whatever IP address "localhost" evaluates to.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org