-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Miklos,

On 5/28/13 9:17 AM, Miklos Espak wrote:
> is it possible to allow access to Tomcat for hosts in a certain
> domain or IP range?
> 
> The RemoteHostValve and RemoteAddrValve works well until I have
> only one of them, but if I have a domain name filter and an IP
> filter together, every request is refused.
> 
> Is there a way to combine these valves by OR?

Note that the "allow" and "deny" attributes are regular expressions,
so you can get as creative as possible. There was a request a while
back for a filter/valve that would operate on CIDR ranges... I don't
think that ever got committed. A quick BZ search didn't find anything.
It must have been on the mailing list.

Combining the valves using OR is not really possible as you describe
it. Tomcat doesn't have anything like Apache httpd's "RequireAny". You
could easily write a new Valve that extends one or the other valve and
implements its own OR semantics.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQIcBAEBCAAGBQJRpOA4AAoJEBzwKT+lPKRYDnsP/0590X/pRZKrmhjFDfM18YUK
fbC/tFlqHMSZ3cBMnDqFnTlqoi7aAstZCVIqdHczxTScmEGfwuCQofp1WwXfX8+t
wbnTL9xZGm8E1BoIdfyS58cUgcMOTHnhJ8zoSc0IXOKe8eJK8yI+DA8Wm00qzymh
x1tz5XVAJrbNTSDDuSbGztRLqcJ8uRS8cfdcVBX19w6laX6RnDwmbTX4ffis2rAF
WpjKfCtFInbeFTR/8Kr2fnvk6VI3GcnHztDMhrJfEjmAEeCFP8Xu60FfZBZzfluO
aqJkZw97SRJOM4V6bY4F66ePVwfmakhJebqdKGmkP3WKWBqjhmh15N4cMgdXGx1y
HENI8VTumT0MZze2vaibgPDuk5eizbGGsBcHEYDtnpHgTXqbYrETlZtDPyxCJy1O
S6dnHLMkxjSqbNgMpEvz9Yp5I09aRoeYUhaSMRTWeHToqPwq/5QCAvq8pMDHnjsM
sQSYfQEwf98VpLWEEMoy2HXvlqMwFgMVi5tqBbgope6fX68nD1WqBjvN3VvH4QF8
T75kkBPNPH7+mFivb8VoA/MNAAxtvFwJPX5/Ycn+3UzhLIzs2Minq2mp8Pp9yMt4
Pf5i2KyGpQXxdGyKK4G5+N5Nxeu0DHz1PtOulcjIGqTZ2sT13jAZYMm/TE7z5mNH
eICwwC/OfAFwCzM8HYDR
=khcQ
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to