You were totally right Mark, thanks for your help I found that there were two xml configuration files used by liferay in my application with this line in the header
<!DOCTYPE form-validation PUBLIC "-//Apache Software Foundation//DTD Commons Validator Rules Configuration 1.1.3//EN" "http://jakarta.apache.org/commons/dtds/validator_1_1_3.dtd"> This was provoking the connections, and after removing this line, the problem is fixed. Thank you. -----Mensaje original----- De: Joaquín Rodriguez-Guerra Urcelay [mailto:jrgue...@gmv.com] Enviado el: jueves, 13 de agosto de 2009 0:02 Para: Tomcat Users List Asunto: RE: tomcat connects to eso.apache.org Hello, The connections that liferay/tomcat is doing are the followings: localhost -> 140.211.11.130 (jakarta.apache.org = eso.apache.org) GET /dtds/validator_1_1_3.dtd HTTP/1.1 User-Agent: Java/1.6.0_15 Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2 Connection: keep-alive apache --> localhost HTTP/1.1 301 Moved Permanently Date: Wed, 12 Aug 2009 21:05:41 GMT Server: Apache/2.2.12 (Unix) Location: http://commons.apache.org/dtds/validator_1_1_3.dtd Vary: Accept-Encoding Content-Length: 340 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>301 Moved Permanently</title> </head><body> <h1>Moved Permanently</h1> <p>The document has moved <a href="http://commons.apache.org/dtds/validator_1_1_3.dtd">here</a>.</p> <hr> <address>Apache/2.2.12 (Unix) Server at jakarta.apache.org Port 80</address> </body></html> localhost --> apache GET /dtds/validator_1_1_3.dtd HTTP/1.1 User-Agent: Java/1.6.0_15 Host: commons.apache.org Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2 Connection: keep-alive apache --> localhost HTTP/1.1 200 OK Date: Wed, 12 Aug 2009 21:05:41 GMT Server: Apache/2.2.12 (Unix) Last-Modified: Sun, 25 Jul 2004 11:55:48 GMT ETag: "b01c68-2b18-3e0098c947900" Accept-Ranges: bytes Content-Length: 11032 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/xml-dtd <!-- DTD for the Validator Rules Configuration File, Version 1.1.3 To allow for XML validation of your rules configuration file, include the following DOCTYPE element at the beginning (after the "xml" declaration): <!DOCTYPE form-validation PUBLIC "-//Apache Software Foundation//DTD Commons Validator Rules Configuration 1.1.3//EN" "http://jakarta.apache.org/commons/dtds/validator_1_1_3.dtd"> $Id: validator_1_1_3.dtd,v 1.1.2.2 2004/04/06 22:20:36 rleland Exp $ --> <!-- The "form-validation" element is the root of the configuration file hierarchy, and contains nested elements for all of the other configuration settings. --> ....... ...... <!-- The java script type, Possible Values [int| string | regexp] --> <!ELEMENT var-jstype (#PCDATA)> localstho --> apache GET /commons/dtds/validator_1_1_3.dtd HTTP/1.1 User-Agent: Java/1.6.0_15 Host: jakarta.apache.org Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2 Connection: keep-alive apache --> localhost HTTP/1.1 301 Moved Permanently Date: Wed, 12 Aug 2009 21:05:42 GMT Server: Apache/2.2.12 (Unix) Location: http://commons.apache.org/dtds/validator_1_1_3.dtd Vary: Accept-Encoding Content-Length: 340 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 localhost --> apache GET /dtds/validator_1_1_3.dtd HTTP/1.1 User-Agent: Java/1.6.0_15 Host: commons.apache.org Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2 Connection: keep-alive apache --localhost HTTP/1.1 200 OK Date: Wed, 12 Aug 2009 21:05:43 GMT Server: Apache/2.2.12 (Unix) Last-Modified: Sun, 25 Jul 2004 11:55:48 GMT ETag: "b01c68-2b18-3e0098c947900" Accept-Ranges: bytes Content-Length: 11032 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: application/xml-dtd So, do they mean anything to you Mark?who is really asking for these xml validtaions? liferay? tomcat? is there a way to tell tomcat not to do these connections? Maybe tell tomcat that there is no internet access? Thanks! ________________________________________ De: Mark Thomas [ma...@apache.org] Enviado el: miércoles, 12 de agosto de 2009 13:45 Para: Tomcat Users List Asunto: Re: tomcat connects to eso.apache.org Joaquín Rodriguez-Guerra Urcelay wrote: > Hello all, I am using tomcat with liferay, and when uploading applications it > is taking too much time. After using a sniffer to see the outgoing > connections we found out that liferay was trying to access > file-01.liferay.com to obtain files, but the firewall was not allowing the > connections, whice was mking a delay. We configured liferay to block these > connections, and uploading time decrement to the half (from 7 min to 3.5). > But now, we are seeing that when uploading applications, there are still > connections to eos.apache.org, probably by tomcat, blocked by the firewall, > which are producing this delay. Do you know how can we block these > connections that tomcat is doing to avoid the delay?? Thank you! That isn't Tomcat. It is your app or a library your app is using. My money would be on an XML schema. Since you are sniffing traffic, what URLs are being requested? Mark --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org ______________________ Este mensaje, y en su caso, cualquier fichero anexo al mismo, puede contener informacion clasificada por su emisor como confidencial en el marco de su Sistema de Gestion de Seguridad de la Informacion siendo para uso exclusivo del destinatario, quedando prohibida su divulgacion copia o distribucion a terceros sin la autorizacion expresa del remitente. Si Vd. ha recibido este mensaje erroneamente, se ruega lo notifique al remitente y proceda a su borrado. Gracias por su colaboracion. ______________________ This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are addressed. Any unauthorised copy, disclosure or distribution of this message is strictly forbidden. If you have received this transmission in error, please notify the sender immediately and delete it. ______________________ --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org ______________________ Este mensaje, y en su caso, cualquier fichero anexo al mismo, puede contener informacion clasificada por su emisor como confidencial en el marco de su Sistema de Gestion de Seguridad de la Informacion siendo para uso exclusivo del destinatario, quedando prohibida su divulgacion copia o distribucion a terceros sin la autorizacion expresa del remitente. Si Vd. ha recibido este mensaje erroneamente, se ruega lo notifique al remitente y proceda a su borrado. Gracias por su colaboracion. ______________________ This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are addressed. Any unauthorised copy, disclosure or distribution of this message is strictly forbidden. If you have received this transmission in error, please notify the sender immediately and delete it. ______________________ --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org