I saw some discussion back on the 2nd of March from John Peace re: restricting IPs not working with Tomcat 5. I've run into the same problem. I've tried restricting by IP, and by hostname, and neither work. I presently have this:
<Context path="/jas/example1" docBase="/cs/home/jas/webapps/example1"> <Valve className="org.apache.catalina.valves.RemoteHostValve" allow="*.cs.yorku.ca"/> </Context> I get 403's for every connection, *.cs.yorku.ca or not. There's no firewall, and the IPs listed in the access log are valid. I've seen some stuff on the web about wacky regexps with tomcat, and although I didn't totally believe it, I also tried "^.+\.cs\.yorku\.ca$" but that didn't work either. I've tried restricting by IP with RemoteHostAddr as well without any luck. Jason. On Tue, 2 Mar 2004 [EMAIL PROTECTED] wrote: > Hello, > > HPUX 11.11 > Java 1.4.2 > Tomcat 4.1.30 > > New to the list and Tomcat. I am trying to restrict access to Tomcat to a > specific range of IP addresses. I looked at all the examples and help on > using "valve". I set it up according to the examples, but can't get it to > work correctly. The IP addresses are as follows: > > 132.24.195.18 - HPUX server (tomcat and java loaded here) > 132.24.195.76 - co-worker's PC > > In my server.xml I add the following after the Engine level statement, with > the following results: > > <Valve className="org.apache.catalina.valves.RemoteAddrValve" > deny="132.24.195.76"/> > RESULT: No one is denied access. User at 132.24.195.76 can get to > 132.24.195.18:8080 and access manager > > <Valve className="org.apache.catalina.valves.RemoteAddrValve" > allow="132.24.195.76"/> > RESULT: Everyone, including 132.24.195.76, is denied access. I get the 403 > error. > > I have tried it with RemoteHostValve and get the same results. It does not > matter what addresses I put in the deny or allow, I always get the same > results. It is looks like the value in the deny or allow is not being read > correctly. > > What am I doing wrong? > > > > John Peace > System Administrator > Allegro Consultants > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
