Re: Limit Tomcat to a specific Browser (User Agent)

[Pid]

On 19/02/2010 12:45, Kristof De Vos wrote:

Hello,

We have an application in php using Apache and we successfully limit the
access
to users accessing the site with a specific browser by checking the User
Agent.
We modified httpd.conf like this:

SetenvIf User-Agent "^FedPol-Portal/2.0" Agent_OK
<Directory "x">
        Options Indexes FollowSymLinks Multiviews
        Order deny,allow
        Allow from env=Agent_OK
</Directory>

Now we have another server running Tomcat and we also need to limit the
access to
a specific browser, but I cannot find the way to do this.

Do I have to change something in server.xml? Or develop something specific
(filter)?

There's no server.xml config for this.  A Servlet Filter would do it, as 
would a Valve.  See the RemoteIPValve for an implementation that solves 
a similar problem.


http://svn.apache.org/repos/asf/tomcat/tc6.0.x/trunk/java/org/apache/catalina/valves/RemoteAddrValve.java

Given how easy it is to fake a User-Agent though...


p

thanks,

Kristof


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org