tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christopher Schultz <ch...@christopherschultz.net>
Subject Re: problem with Remote Address Filter
Date Fri, 13 Sep 2013 14:13:45 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Garey,

On 9/12/13 4:14 PM, Garey Mills wrote:
> I'm running Apache Tomcat Version 7.0.29. I have inserted a Remote 
> Address filter into server.xml inside of the <Host> tag. It is not
> blocking addresses that are not in <Allow>.

:(

> I am using the Remote Address filter because I want to allow
> access only to addresses in our institution's community. This is a
> large institution and we have 4 or 5 class B address ranges, maybe
> 10 class Cs, and a number of broken ranges. The regular expression
> runs to 8181 characters without doubling up on \. It does, however,
> work in a test Java class that I wrote, correctly allowing and
> disallowing a test group of addresses.
> 
> One question I have is that the example in
> 
> http://tomcat.apache.org/tomcat-7.0-doc/config/filter.html#Remote_Address_Filter
>
>  has single backslashes, but in order to make the pattern work in
> my test class, I had to double up on the slashes.

This is a Java-source issue: Java requires you to \-escape "\"
characters because the "\" is itself an escape character in Java
source. If you are configuring Tomcat via XML (i.e. conf/server.xml),
then the double-\ characters are not necessary: only a single \ is
required.

> I took a look at the RequestFilter code, and it looks like the
> pattern string is just passed to Pattern.compile, so the pattern in
> the filter should need double slashes.

No. The double-\ is removed by the compiler, so at runtime both the
XML and hard-coded strings end up only having single-\ in their text.

> I've tried it both ways and neither worked.
> 
> Anybody have any idea about what might be going wrong?

Can you give us a very small snippet of the pattern you are using in
conf/server.xml?

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=Db9j
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message