Return-Path: 
 <users-return-228160-apmail-tomcat-users-archive=tomcat.apache.org@tomcat.apache.org>
X-Original-To: apmail-tomcat-users-archive@www.apache.org
Delivered-To: apmail-tomcat-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 1C4FA7BBA
	for <apmail-tomcat-users-archive@www.apache.org>;
 Tue,  4 Oct 2011 17:44:26 +0000 (UTC)
Received: (qmail 13335 invoked by uid 500); 4 Oct 2011 17:44:22 -0000
Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org
Received: (qmail 12983 invoked by uid 500); 4 Oct 2011 17:44:22 -0000
Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@tomcat.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@tomcat.apache.org>
List-Post: <mailto:users@tomcat.apache.org>
List-Id: <users.tomcat.apache.org>
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Delivered-To: mailing list users@tomcat.apache.org
Received: (qmail 12974 invoked by uid 99); 4 Oct 2011 17:44:22 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 04 Oct 2011 17:44:22 +0000
X-ASF-Spam-Status: No, hits=0.7 required=5.0
	tests=RCVD_IN_DNSWL_NONE,SPF_NEUTRAL
X-Spam-Check-By: apache.org
Received-SPF: neutral (athena.apache.org: local policy)
Received: from [76.96.62.40] (HELO qmta04.westchester.pa.mail.comcast.net)
 (76.96.62.40)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 04 Oct 2011 17:44:15 +0000
Received: from omta20.westchester.pa.mail.comcast.net ([76.96.62.71])
	by qmta04.westchester.pa.mail.comcast.net with comcast
	id ghhT1h0041YDfWL54hjvPS; Tue, 04 Oct 2011 17:43:55 +0000
Received: from [192.168.1.201] ([69.143.109.145])
	by omta20.westchester.pa.mail.comcast.net with comcast
	id ghju1h01A38FjT13ghjuRg; Tue, 04 Oct 2011 17:43:55 +0000
Message-ID: <4E8B45DC.2030800@christopherschultz.net>
Date: Tue, 04 Oct 2011 13:43:56 -0400
From: Christopher Schultz <chris@christopherschultz.net>
User-Agent: Mozilla/5.0 (Windows NT 6.1;
 rv:7.0.1) Gecko/20110929 Thunderbird/7.0.1
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: Denying IPs using the Valve command in context.xml
References: <4E8B40A3.2010103@CyberTools.biz>
In-Reply-To: <4E8B40A3.2010103@CyberTools.biz>
X-Enigmail-Version: 1.3.2
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sanford,

On 10/4/2011 1:21 PM, Sanford Stein wrote:
> 1.  I am using wildcards in my IP addresses, such as: <Valve
> className="org.apache.catalina.valves.RemoteAddrValve" 
> deny="*.googlebot.com"/>

That doesn't look like a valid regular expression.

> From my reading of the documentation, this should be OK, but when
> this line is present I cannot access any of my servlets from any IP
> address.   Do wildcards work here and, if so, what am I doing
> wrong?

You are trying to use a glob-style wildcard instead of a regular
expression.

> 2.  Is it possible for a give IP to permit access to some servlets
> while denying access to others?

I don't think you can do this with a <Valve>, but you can do it with a
<Filter>
(http://tomcat.apache.org/tomcat-7.0-doc/config/filter.html#Remote_Address_Filter)
that is only mapped to certain servlets.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk6LRdwACgkQ9CaO5/Lv0PDUvwCfaycwYGMvZc7l7qGf618uIUa9
DKwAn3gcfFCmsYA+GO9K2FFxchMZUUq3
=5fnP
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org