I saw some discussion back on the 2nd of March from John Peace re:
restricting IPs not working with Tomcat 5.  I've run into the same
problem. I've tried restricting by IP, and by hostname, and neither work.
I presently have this:

<Context path="/jas/example1" docBase="/cs/home/jas/webapps/example1">
<Valve className="org.apache.catalina.valves.RemoteHostValve" allow="*.cs.yorku.ca"/>
</Context>

I get 403's for every connection, *.cs.yorku.ca or not.  There's no
firewall, and the IPs listed in the access log are valid.  I've seen some
stuff on the web about wacky regexps with tomcat, and although I didn't
totally believe it, I also tried "^.+\.cs\.yorku\.ca$" but that didn't
work either.  I've tried restricting by IP with RemoteHostAddr as well
without any luck.

Jason.

On Tue, 2 Mar 2004 [EMAIL PROTECTED] wrote:

> Hello,
>
> HPUX 11.11
> Java 1.4.2
> Tomcat 4.1.30
>
> New to the list and Tomcat. I am trying to restrict access to Tomcat to a
> specific range of IP addresses. I looked at all the examples and help on
> using "valve". I set it up according to the examples, but can't get it to
> work correctly. The IP addresses are as follows:
>
> 132.24.195.18 -       HPUX server (tomcat and java loaded here)
> 132.24.195.76 -       co-worker's PC
>
> In my server.xml I add the following after the Engine level statement, with
> the following results:
>
> <Valve className="org.apache.catalina.valves.RemoteAddrValve"
> deny="132.24.195.76"/>
> RESULT: No one is denied access. User at 132.24.195.76 can get to
> 132.24.195.18:8080 and access manager
>
> <Valve className="org.apache.catalina.valves.RemoteAddrValve"
> allow="132.24.195.76"/>
> RESULT: Everyone, including 132.24.195.76, is denied access. I get the 403
> error.
>
> I have tried it with RemoteHostValve and get the same results. It does not
> matter what addresses I put in the deny or allow, I always get the same
> results. It is looks like the value in the deny or allow is not being read
> correctly.
>
> What am I doing wrong?
>
>
>
> John Peace
> System Administrator
> Allegro Consultants
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to