Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-24 Thread André Warnier
Jaikit Savla wrote: Hi, You are right it does regrex matching. I wanted to say that it does not do any kind of dnslookup in filter. @configuration: I do not have any particular configuration or firewall set up. I have mentioned below output from tcpdump (listening on loopback interface) and as

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jaikit, On 9/22/12 6:04 PM, Jaikit Savla wrote: I have some admin api's which I want to have restricted access I think you mean APIs. admin api's which is a possessive even a native English speaker can't figure out. - such that only if the

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 9/24/12 3:58 AM, André Warnier wrote: 1) curl http://localhost/something Result in log : ::1 - - [24/Sep/2012:09:22:51 +0200] GET /something HTTP/1.1 404 282 - curl/7.21.0 (i486-pc-linux-gnu) libcurl/7.21.0 OpenSSL/0.9.8o

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-24 Thread jaikit
One of the platform team's filter was overriding the remote address with actual ip :( I removed their filter and verified. Apologies and thanks everyone for their time. Thanks On 9/24/12 11:58 AM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jaikit, On 9/22/12

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-23 Thread Jaikit Savla
List users@tomcat.apache.org Cc: Sent: Saturday, September 22, 2012 10:41 PM Subject: Re: Authenticate requests from localhost using tomcat RemoteAddrFilter Jaikit, Am 23.09.2012 00:04, schrieb Jaikit Savla: Hello Users, I have some admin api's which I want to have restricted access

RE: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-23 Thread Martin Gainty
, Martin Date: Sat, 22 Sep 2012 23:36:33 -0700 From: jaikit.sa...@yahoo.com Subject: Re: Authenticate requests from localhost using tomcat RemoteAddrFilter To: users@tomcat.apache.org I have not yet tried playing with firewall. I was thinking in the lines of adding capability in filter

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-23 Thread Konstantin Kolinko
2012 23:36:33 -0700 From: jaikit.sa...@yahoo.com Subject: Re: Authenticate requests from localhost using tomcat RemoteAddrFilter To: users@tomcat.apache.org I have not yet tried playing with firewall. I was thinking in the lines of adding capability in filter to find if the request

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-23 Thread Konstantin Kolinko
2012/9/23 Jaikit Savla jaikit.sa...@yahoo.com: Hello Users, I have some admin api's which I want to have restricted access - such that only if the request originates from localhost - it will execute. For that I am using tomcat's RemoteAddrfilter filter filter-nameRemote Address

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-23 Thread Jaikit Savla
, 2012 6:52 AM Subject: Re: Authenticate requests from localhost using tomcat RemoteAddrFilter 2012/9/23 Jaikit Savla jaikit.sa...@yahoo.com: Hello Users, I have some admin api's which I want to have restricted access - such that only if the request originates from localhost - it will execute

Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-22 Thread Jaikit Savla
Hello Users, I have some admin api's which I want to have restricted access - such that only if the request originates from localhost - it will execute. For that I am using tomcat's RemoteAddrfilter filter       filter-nameRemote Address Filter/filter-name      

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-22 Thread Ralph Plawetzki
Jaikit, Am 23.09.2012 00:04, schrieb Jaikit Savla: Hello Users, I have some admin api's which I want to have restricted access - such that only if the request originates from localhost - it will execute. For that I am using tomcat's RemoteAddrfilter what exactly do you mean with admin