Ahh, maybe this is not so simple as I thought. I have been laboring under the misconception that the custom wrapper served from the web server would have the ip address of the webserver, but this is wrong, it hits the Tomcat server with the ip address of the client.
So I am starting over. I'm starting to google this again, but any suggestions on how to secure an ISAPI filter? Tracy -----Original Message----- From: [email protected] [mailto:[EMAIL PROTECTED] On Behalf Of Jason R. Weiss Sent: Wednesday, August 31, 2005 8:34 PM To: [email protected] Subject: [flexcoders] Re: Very simple security need: where to start? Take a look at RemoteHostValve and the RemoteAddrValve in the Tomcat docs. They'll give you what you want. You should be able to do something like this in server.xml: <Context path="" reloadable="true" docBase="c:/www" debug="0"> <Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="128.46.*.*"/> ... </Context> This example would only allow connections from 128.146.*.* clients. HTH, Jason Weiss -- Jason Weiss Cynergy Systems, Inc. Macromedia Flex Alliance Partner http://www.cynergysystems.com Email: [EMAIL PROTECTED] Office: 866-CYNERGY Mobile: 1.832.444.2246 -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com Yahoo! Groups Links ------------------------ Yahoo! Groups Sponsor --------------------~--> Get Bzzzy! (real tools to help you find a job). Welcome to the Sweet Life. http://us.click.yahoo.com/A77XvD/vlQLAA/TtwFAA/nhFolB/TM --------------------------------------------------------------------~-> -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/flexcoders/ <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/

