I checked both the admin "web.xml" and the manager "web.xml", and I do have a valve in them, restricting access to localhost plus the internal web.
It is entirely possible that I am mistaken - what I thought was external access was in fact a router being intelligent. I will have to test more to see if there is a "real" external connection.
Thanks,
-Richard
Richard,
Use a remote address valve. http://jakarta.apache.org/tomcat/tomcat-5.0-doc/config/valve.html
Set it up for allow and the IP ranges you want to get in.
Doug www.parsonstechnical.com
----- Original Message ----- From: "Richard S. Huntrods" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, May 04, 2004 1:41 AM
Subject: Help with manager app
I have a rather urgent problem. I have been using tomcat for several years now, and normally weather the upgrades with some few problems, but nothing serious - until now.
My problem - in the old Tomcat, I used the manager application to monitor the number of users accessing the system. In the old version, I had it set up so that external requests could NOT see the manager, ever.
Now, under the new Tomcat, the manager app has changed. Today I also noticed that it is also available to the internet.
How do I restrict access to the manager application to the local network - i.e. how do I turn off internet access to the manager app?
Thanks in advance,
-Richard
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
