Re: port 8009 security (ajp13)

2003-08-18 Thread yo
Eric,

Thank you for the reply.

Eric J. Pinnell [EMAIL PROTECTED] wrote:

 Hi,

 Firewalls.  In a single box setup you would have a firewall that would
 only allow access to port 80.  Apache would get the request and forward it
 back to itself on port 8009.  This would be behind the firewall so you
 couldn't access port 8009 directly.

 In a N-tier setup there would be a firewall between the apache server and
 the tomcat server.  You can control access to port 8009 from the firewall.

 -e

My Apache and Tomcat, they are working on the single host,
so I think have to use a firewall.

I can use a SunScreen 3.2 for the firewall because my OS
is a Solaris 9, so I am going to try to use it first.
Then I will try to use a N-tier if can't use it.

Thanks again.

--
yo


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: port 8009 security (ajp13)

2003-08-18 Thread yo
Hi Bill,

Thank you for the reply.

Quoting Bill Barker [EMAIL PROTECTED]:

 Well, you have, like two options (that you would already know about if
 you
 had bothered to RTFM ;-).
 1) In server.xml set the 'address=localhost' parameter on the
 Connector.
 2) In jk2.properties set 'channelSocket.address=localhost'

Both two ways are working! 
Now my Tomcat says, 
'INFO: JK2: ajp13 listening on /127.0.0.1:8009'.

These ways are pretty simple and easy compared with 
the way using firewall tools. It is pretty difficult for me
to use firewalls, so your advice are very helpful.

Thank you very much ! :-

And I found and Read The "Fine" Manual.
http://jakarta.apache.org/tomcat/tomcat-4.1-doc/jk2/jk2/configtccom.html
Uh.. I'll try to read harder next time. X- 

Humm..? I have a little question. I can't find 
the "address" attiribute in the JK2 document. 
How come the JK2 document hasn't ?

org.apache.coyote.tomcat4.CoyoteConnector has 
the 'setAddress()' method, so I think we can set
a value to address attribute in JK2 connector. 

Any clues to this would be very appeciated.

--
yo




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

port 8009 security (ajp13)

2003-08-17 Thread yo
Hi, everyone

I have a question about port 8009.
I'm using Tomcat 4.1.27, Apache 2.0.47, mod_jk2/2.0.3-dev.

When Tomcat starts, Tomcat says,
"INFO: JK2: ajp13 listening on /0.0.0.0:8009".
(This message is in catalina.out)

How do you control access to port 8009 ?
I guess I have to do something for the Tomcat security...
but can't find any configurations about that in server.xml.

Any help is highly appreciated.

thanks and regards

--
yo  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

port 8009 security (ajp13)

2003-08-16 Thread yo
Hi, everyone

I have a question about port 8009.

I'm using Tomcat 4.1.27, Apache 2.0.47, mod_jk2/2.0.3-dev on Solaris 9.
When Tomcat starts, Tomcat says,
INFO: JK2: ajp13 listening on /0.0.0.0:8009.
(This message is in catalina.out)

I guess I have to do something for the Tomcat security...
but can't find any configurations about that in server.xml.
How do you guys control access to port 8009 ?

Any help is highly appreciated.

Thanks and Regards.

--
yo

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]