> On Jan 12, 2017, at 1:22 PM, Pierre Smits <pierre.sm...@gmail.com> wrote: > > Please do not use the syncope implementation via the unencrypted tomcat port > 8080/ >
Then configure tomcat to only listen on loopback, or only allow access from the local interface then. Better yet change the firewall rules. Or do both. ;) Assuming the VM is in puppet the firewall rules should be a few lines of config. -- Cheers, Tony ----------------------- http://www.pc-tony.com GPG - 3072D/2543E323 -----------------------
