Hello All, We are using - Tomcat Version - 7.0.22 Operating System Version : Windows 2003 server
To close a vulnerability, "To denying the request if it comes through IP address instead of DNS", we have made below configuration changes in server.xml <Engine name="Catalina" defaultHost="server DNS name"> defaultHost was set to localhost prior to change <Host name= "server DNS name" appBase="webapps" unpackWARs="true" autoDeploy="true"> Hostname was set to localhost prior to change But Due this change we are losing logging in localhost.log in logs folder of TOMCAT, Please suggest how to redirect console logging to a given file or how to retain the localhost.log file of tomcat. Kindly also let us know instead of above settings any other configuration setting will make denial of any request if it comes through IP address instead of DNS, Thanks & Regards Deepak Kumar "Disclaimer and confidentiality clause - This message and any attachments relating to official business of CCIL OR ANY OF IT'S SUBSIDIARIES is proprietary to CCIL and intended for the original addressee only. The message may contain information that is confidential and subject to legal privilege. Any views expressed in this message are those of the individual sender. If you have received this message in error, please notify the original sender immediately and destroy the message and copies thereof and any attachments contained in it . If you are not the intended recipient of this message, you are hereby notified that you must not disseminate, copy, use, distribute, or take any action in connection therewith. CCIL cannot ensure that the integrity of this communication has been maintained nor that it is free of errors, viruses, interception and/or interference. CCIL is not liable whatsoever for loss or damage resulting from the opening of this message and/or attachments and/or the use of the information contained in this message and/or attachments."
