James,

On 11/14/25 12:20 PM, James H. H. Lampert wrote:
On 11/14/25 9:14 AM, Christopher Schultz wrote:

The "straight-out-of-the-box" allow clause for the 110 manager is
allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1"

Is it? Where did you find that?

<sheepishly> In the Manager's RemoteAddrValve. </sheepishly>

(No need to be sheepish. Just asking for clarity.)

Do you mean this one?

  <Valve className="org.apache.catalina.valves.RemoteAddrValve"
         allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1" />

Please note the className.

Hmm! The "straight-out-of-the-box" allow clause for the 111 manager is
allow="127.0.0.0/8,::1/128"

Where do you see that, as well?

<sheepishly> In the Manager's RemoteCIDRValve.
</sheepishly>

Do you mean this one?

  <Valve className="org.apache.catalina.valves.RemoteCIDRValve"
         allow="127.0.0.0/8,::1/128" />

Please note the className.

If you upgraded from 9.0.110 (far above) to 9.0.111 (above) and didn't modify your <Valve> configuration, then each version should have been happy with itself.

Is it possible that you ran one version with the configuration of another? The CIDR valve has never supported regular expressions for IP addresses. The RemoteAddrValve has always used regular expressions, and shouldn't have an issue with any.

But your error message at the start of this thread was logged by RemoteCIDRValve and complained about an obviously regular-expression-looking value.

So what's up?

-chris


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to