You can do the
same things with Valves and Filters for free.
Stupid question, but what exactly is the point of limiting access by IP
address? (IP addresses being spoofable, and all, ...)
--
Joel Rees [EMAIL PROTECTED]
--
To unsubscribe, e-mail: mailto:[EMAIL PROTECTED]
For additional
* Joel Rees [EMAIL PROTECTED] [0146 08:46]:
You can do the
same things with Valves and Filters for free.
Stupid question, but what exactly is the point of limiting access by IP
address? (IP addresses being spoofable, and all, ...)
Well, yeah, but if you assume your network is intact
) is a function of:
Something you know (a username and password)
Something you have (a smartcard or IP address)
Something you are (biometrics)
Gary
Joel Rees wrote:
You can do the
same things with Valves and Filters for free.
Stupid question, but what exactly is the point of limiting access
: limiting access by IP address
An IP address cannot be changed mid-stream and cannot be easily faked
(without the cooperation of the intervening network systems).
The Apache
distribution has long included mod_access for this purpose, and it is
widely used. With Apache, you can either specify
You can do this using our Cams access management product with Tomcat
(see http://www.cafesoft.com). The XML looks like this:
!-- Example 4 - allow access to only host 127.0.0.1 --
host-acr id=allow ip rule
allow-address
address127.0.0.1/address
-
From: Gary Gwin [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, January 07, 2003 11:59 AM
To: Tomcat Users List
Subject: Re: limiting access by IP address
You can do this using our Cams access management product with Tomcat
(see http://www.cafesoft.com). The XML looks like
Could anyone tell me how to limit access to a
particular servlet by IP address or hostname?
Any pointer to documentation that cover this topic
would be appreciated.
__
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
that looks at requests
for that servlet.
John
-Original Message-
From: icewind
To: [EMAIL PROTECTED]
Sent: 1/6/03 10:45 PM
Subject: limiting access by IP address
Could anyone tell me how to limit access to a
particular servlet by IP address or hostname?
Any pointer to documentation that cover
I don't know of any documentation on the subject, but one way I've seen
it done was to search though the http header for the sender of the
request. This will (if I remember right) always be an ip address.
You can then do a regex check on the ip and if it checks out let it
through your gateway
