Re: Denying IP Addresses

2008-09-11 Thread Mark Thomas
Pid wrote:
> Edward Song wrote:
>> Hi all, 
>>
>>  
>>
>> Just soliciting some feedback on how to effectively, thwart data mining on
>> our server.
>>
>>  
>>
>> We have a reactive solution when it comes to screen scraping and data mining
>> on Tomcat 5.5.  
>>
>> We simply find the offending IP's and add them to the deny rules using the
>> Valve - org.apache.catalina.valves.RemoteAddrValve
>>
>> >From what I understand, for changes to take effect, requires a restart of
>> Tomcat.
>>
>> I was thinking to override the RemoteAddrValve to retrieve offending IP's
>> from a file as well, so as not requiring a restart everytime an offending IP
>> is found.  
>>
>> Our applications then would be able to identify offending IP's, and based on
>> their own rules, add them to the file.  
> 
> it could be expensive to check the file for every request.
> if you're going to do that, then consider caching the file and using an
> internal thread to reload it periodically.

You could use JMX to update the list of denied IP addresses. Better yet,
just use iptables.


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Denying IP Addresses

2008-09-09 Thread Pid
Edward Song wrote:
> Hi all, 
> 
>  
> 
> Just soliciting some feedback on how to effectively, thwart data mining on
> our server.
> 
>  
> 
> We have a reactive solution when it comes to screen scraping and data mining
> on Tomcat 5.5.  
> 
> We simply find the offending IP's and add them to the deny rules using the
> Valve - org.apache.catalina.valves.RemoteAddrValve
> 
>>From what I understand, for changes to take effect, requires a restart of
> Tomcat.
> 
> I was thinking to override the RemoteAddrValve to retrieve offending IP's
> from a file as well, so as not requiring a restart everytime an offending IP
> is found.  
> 
> Our applications then would be able to identify offending IP's, and based on
> their own rules, add them to the file.  

it could be expensive to check the file for every request.
if you're going to do that, then consider caching the file and using an
internal thread to reload it periodically.

p


> 
>  
> 
> Is this a viable strategy?
> 
>  
> 
> Thanks in advance,
> 
> Ed
> 
> 


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Denying IP Addresses

2008-09-09 Thread Edward Song
Hi all, 

 

Just soliciting some feedback on how to effectively, thwart data mining on
our server.

 

We have a reactive solution when it comes to screen scraping and data mining
on Tomcat 5.5.  

We simply find the offending IP's and add them to the deny rules using the
Valve - org.apache.catalina.valves.RemoteAddrValve

>From what I understand, for changes to take effect, requires a restart of
Tomcat.

I was thinking to override the RemoteAddrValve to retrieve offending IP's
from a file as well, so as not requiring a restart everytime an offending IP
is found.  

Our applications then would be able to identify offending IP's, and based on
their own rules, add them to the file.  

 

Is this a viable strategy?

 

Thanks in advance,

Ed