I deleted 4.1.30. I downloaded 5.0.19 and loaded it on my HP. I added just
theRemoteAddrValve  deny valve. Same thing, everyone can connect. Attached
is catalina.out from the startup. There are some errors. I looked on the web
and all I can find is to reload from scratch. This is a brand new install.
Nothing has been changed except for my one added line?

John



-----Original Message-----
From: Shapira, Yoav [mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 02, 2004 9:11 AM
To: Tomcat Users List
Subject: RE: Restrict to specific IP's



Hi,

><Valve className="org.apache.catalina.valves.RemoteAddrValve"
>deny="132.24.195.76"/>
>RESULT: No one is denied access. User at 132.24.195.76 can get to
>132.24.195.18:8080 and access manager

Very strange: I can't reproduce what you're seeing.  On a brand new
tomcat 5.0.19 installation, I just added a RemoteAddrValve to deny one
of my PCs access, and restarted tomcat.  When I try to access the server
from that PC (and no others), I get HTTP 403 (Forbidden), as designed
and expected.  I haven't tested the allow functionality.

>What am I doing wrong?

I'm not sure.  Are there other errors in the startup logs that are
preventing the server from processing the Valve directive, maybe?  You
can also enable the AccessLogValve so you can see the response code: you
should see 403s for denied requests.

Unfortunately the relevant code
(http://cvs.apache.org/viewcvs.cgi/jakarta-tomcat-catalina/catalina/src/
share/org/apache/catalina/valves/RequestFilterValve.java?rev=1.3&view=ma
rkup) doesn't seem to have much logging.  But if you're still having
trouble, then you have the option of downloading the source, adding
logging there, and rebuilding tomcat for your own debugging.

Yoav Shapira



This e-mail, including any attachments, is a confidential business
communication, and may contain information that is confidential, proprietary
and/or privileged.  This e-mail is intended only for the individual(s) to
whom it is addressed, and may not be saved, copied, printed, disclosed or
used by anyone else.  If you are not the(an) intended recipient, please
immediately delete this e-mail from your computer system and notify the
sender.  Thank you.


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Tue Mar  2 09:41:31 EST 2004
# cat catalina.out |more
Mar 2, 2004 9:41:03 AM org.apache.coyote.http11.Http11Protocol init
INFO: Initializing Coyote HTTP/1.1 on port 8080
Mar 2, 2004 9:41:04 AM org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 3890 ms
Mar 2, 2004 9:41:04 AM org.apache.catalina.core.StandardService start
INFO: Starting service Catalina
Mar 2, 2004 9:41:04 AM org.apache.catalina.core.StandardEngine start
INFO: Starting Servlet Engine: Apache Tomcat/5.0.19
Mar 2, 2004 9:41:04 AM org.apache.catalina.core.StandardHost start
INFO: XML validation disabled
Mar 2, 2004 9:41:04 AM org.apache.catalina.core.StandardHost getDeployer
INFO: Create Host deployer for direct deployment ( non-jmx ) 
Mar 2, 2004 9:41:04 AM org.apache.catalina.core.StandardHostDeployer install
INFO: Processing Context configuration file URL file:/usr/local/jakarta-tomcat-5
.0.19/conf/Catalina/localhost/admin.xml
Mar 2, 2004 9:41:07 AM org.apache.struts.util.PropertyMessageResources <init>
INFO: Initializing, config='org.apache.struts.util.LocalStrings', returnNull=tru
e
Mar 2, 2004 9:41:07 AM org.apache.struts.util.PropertyMessageResources <init>
INFO: Initializing, config='org.apache.struts.action.ActionResources', returnNul
l=true
Mar 2, 2004 9:41:08 AM org.apache.struts.util.PropertyMessageResources <init>
INFO: Initializing, config='org.apache.webapp.admin.ApplicationResources', retur
nNull=true
Mar 2, 2004 9:41:12 AM org.apache.catalina.core.StandardHostDeployer install
INFO: Processing Context configuration file URL file:/usr/local/jakarta-tomcat-5
.0.19/conf/Catalina/localhost/balancer.xml
Mar 2, 2004 9:41:12 AM org.apache.catalina.core.StandardHostDeployer install
INFO: Processing Context configuration file URL file:/usr/local/jakarta-tomcat-5
.0.19/conf/Catalina/localhost/manager.xml
Mar 2, 2004 9:41:13 AM org.apache.catalina.core.StandardHostDeployer install
INFO: Installing web application at context path  from URL file:/usr/local/jakar
ta-tomcat-5.0.19/webapps/ROOT
Mar 2, 2004 9:41:13 AM org.apache.catalina.core.StandardHostDeployer install
INFO: Installing web application at context path /jsp-examples from URL file:/us
r/local/jakarta-tomcat-5.0.19/webapps/jsp-examples
Mar 2, 2004 9:41:13 AM org.apache.catalina.core.StandardContext start
SEVERE: Error filterStart
Mar 2, 2004 9:41:13 AM org.apache.catalina.core.StandardContext start
SEVERE: Context startup failed due to previous errors
Mar 2, 2004 9:41:13 AM org.apache.catalina.core.StandardHostDeployer install
INFO: Installing web application at context path /servlets-examples from URL fil
e:/usr/local/jakarta-tomcat-5.0.19/webapps/servlets-examples
Mar 2, 2004 9:41:14 AM org.apache.catalina.core.StandardContext start
SEVERE: Error filterStart
Mar 2, 2004 9:41:14 AM org.apache.catalina.core.StandardContext start
SEVERE: Context startup failed due to previous errors
Mar 2, 2004 9:41:14 AM org.apache.catalina.core.StandardHostDeployer install
INFO: Installing web application at context path /tomcat-docs from URL file:/usr
/local/jakarta-tomcat-5.0.19/webapps/tomcat-docs
Mar 2, 2004 9:41:14 AM org.apache.catalina.core.StandardHostDeployer install
INFO: Installing web application at context path /webdav from URL file:/usr/loca
l/jakarta-tomcat-5.0.19/webapps/webdav
Mar 2, 2004 9:41:14 AM org.apache.coyote.http11.Http11Protocol start
INFO: Starting Coyote HTTP/1.1 on port 8080
Mar 2, 2004 9:41:15 AM org.apache.jk.common.ChannelSocket init
INFO: JK2: ajp13 listening on /0.0.0.0:8009
Mar 2, 2004 9:41:15 AM org.apache.jk.server.JkMain start
INFO: Jk running ID=0 time=1/152  config=/usr/local/jakarta-tomcat-5.0.19/conf/j
k2.properties
Mar 2, 2004 9:41:15 AM org.apache.catalina.startup.Catalina start
INFO: Server startup in 11328 ms
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to