Re: Securing Tomcat on FC8

2008-03-28 Thread Steve Ochani
Date sent: Fri, 28 Mar 2008 16:07:26 -0400 From: "Hyatt, Gordon" <[EMAIL PROTECTED]> Subject: Securing Tomcat on FC8 To: users@tomcat.apache.org Send reply to: Tomcat Users List > I've just fin

Re: Securing Tomcat on FC8

2008-03-28 Thread Mark H. Wood
Aside from packet-mangling the port numbers between the interface(s) and Tomcat's sockets, there are two other ways to use "privileged" ports but not run Tomcat with special privilege: 1. Run behind something like Apache HTTPD, which already does the privilege separation for you. This is a h

Securing Tomcat on FC8

2008-03-28 Thread Hyatt, Gordon
I've just finished reading the Tomcat Security chapter of O'Reilly's Tomcat, The Definitive Guide that covers Tomcat 4 and have been left with many questions. First, a little background: I've setup a new web server on FC8 x86_64 running Sun Java 1.6.0_05 and tomcat 5.5.26. I'm very familiar with