The auto-deploy Context frag here is a good place to advertise host limiting using the RemoteAddress valve.
Ian
--- webapps/admin/admin.xml.orig Fri Jul 12 09:30:15 2002 +++ webapps/admin/admin.xml Fri Jul 12 09:32:36 2002 @@ -10,6 +10,13 @@ <Context path="/admin" docBase="../server/webapps/admin" debug="0" privileged="true"> + <!-- Uncomment this Valve to limit access to the Admin app to localhost + for obvious security reasons. Allow may be a comma-separated list of + hosts (or even regular expressions). + <Valve className="org.apache.catalina.valves.RemoteAddrValve" + allow="127.0.0.1"/> + --> + <Logger className="org.apache.catalina.logger.FileLogger" prefix="localhost_admin_log." suffix=".txt" timestamp="true"/>
-- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>