Don't know about Apache, but what about configuring Tomcat - doc say there are remote filters which looks like they would do what you want:
http://jakarta.apache.org/tomcat/tomcat-4.1-doc/config/valve.html Niall ----- Original Message ----- From: "Erik Weber" <[EMAIL PROTECTED]> To: "Struts Users Mailing List" <[EMAIL PROTECTED]> Sent: Friday, September 17, 2004 10:35 PM Subject: [OT] Apache/Tomcat restriction by IP address > I have a site running on a third-party box that uses Apache in front of > Tomcat. I need to restrict the entire site to a series of IP addresses. > > Using the Deny, Order and Allow commands in a .htaccess file works for > whatever is in Apache's public document root. However, it doesn't > prevent requests that are dispatched to Tomcat. > > For example, if I forbid my own IP address with this: > > Deny from xxx.xx.xx.xxx > > I cannot access anything in Apache's document root, but I can still > access any pages that are served by Tomcat. (Apache is configured to > dispatch *.jsp to Tomcat). > > How can I tell Apache to filter *all* requests by IP address? > > Thanks, > Erik > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]