Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (athena.apache.org: domain of aw@ice-sa.com designates
 212.85.38.228 as permitted sender)
Message-ID: <4B294EB6.4090109@ice-sa.com>
Date: Wed, 16 Dec 2009 22:18:46 +0100
From: =?ISO-8859-1?Q?Andr=E9_Warnier?= <aw@ice-sa.com>
Reply-To: Tomcat Users List <users@tomcat.apache.org>
User-Agent: Thunderbird 2.0.0.23 (Windows/20090812)
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: Using RemoteAddressValve with an Apache mod_proxy_balancer
References: <4B29451E.2080100@ufl.edu>
In-Reply-To: <4B29451E.2080100@ufl.edu>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Martin B. Smith wrote:
> Howdy!
> 
> I'm trying to ensure that only specific instances of Apache are allowed 
> to proxy requests into my Tomcat 5.5.28 instances. Unfortunately, it 
> looks like Tomcat is seeing the actual client IP making the original 
> request to Apache. Does anyone have a configuration that only allows 
> specific Apache (mod_)proxies to be serviced by Tomcat?
> 
Of course if your are under Linux, you could use iptables to block 
requests to port 8009, from hosts you don't like.
And if you are under Windows, you could use the Windows firewall or 
filtering rules.
Probably even more efficient than doing this at the Tomcat level.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org