27;Tomcat Users List'
Subject: RE: Shutdown port
Hey!
I had a question! Can you shutdown the machine by typing
http://localhost:8005 in the browser?
I thought this was disabled in the Tomcat version 4 onwards?
Regards
Rajaneesh
-Original Message-
From: Ben Ricker [mailto:[EMAIL
: Tomcat Users List
Subject: Re: Shutdown port
For an extra bit of security,replace "SHUTDOWN" with some sort of long,
random string and then lock down the server.xml to 640. Someone who
gains, or already has access to the box can shut it down the other way.
Ben Ricker
On Jan 12, 2005,
For an extra bit of security,replace "SHUTDOWN" with some sort of long,
random string and then lock down the server.xml to 640. Someone who
gains, or already has access to the box can shut it down the other way.
Ben Ricker
On Jan 12, 2005, at 6:55 AM, Frank Parato wrote:
Is there a way to remov
You're right. Thanks!
-Original Message-
From: David Smith [mailto:[EMAIL PROTECTED]
Sent: Wednesday, January 12, 2005 8:06 AM
To: Tomcat Users List
Subject: Re: Shutdown port
From what I understand from other postings, no. However, the shutdown
port is bound to the loca
I don't think you can as tomcat uses this itself for shutting down nicely.
You could use a firewall to block the port from external access and changing
the SHUTDOWN command to something else will stop people guessing at it. You can
also change the port to a non default one.
Ta
Matt
-Origi
From what I understand from other postings, no. However, the shutdown
port is bound to the localhost interface so only a connection from
127.0.0.1 will work. Joe Schmoe client out in internet land can't
shutdown your tomcat service.
--David
Frank Parato wrote:
Is there a way to remove the shu
Howdy,
The shutdown port starts even before the connector port(s) so it's not
an issue of the shutdown port starting slowly.
The shutdown port by default only listens to connections from the local
host. So you should have a line like localhost.8005 ... LISTEN in your
netstat output. Can you sti
