-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Baran,
On 9/24/14 5:04 PM, Baran Topal wrote: > Hi, following works under server.xml > > <Context path="/index.jsp" reloadable="true"> <Valve > className="org.apache.catalina.valves.RemoteAddrValve" > deny="127\.0\.0\.1"/> </Context> Yes, it will work, but declaring a <Context> in server.xml is a Bad Idea. It's better to use a META-INF/context.xml file, or, even better, a file in CATALINA_BASE/conf/[engine]/[host]/[webapp].xml > But, i need to hide my admin directory containing admin.jsp pages > (more than 1 jsp page) The above configuration will deny all users from localhost (but only using IPv4) for all URL patterns matching your /index.jsp context (why in the world would you have a context path /index.jsp?). Something tells me you are seriously misconfiguring this server. > My admin directory is in WEB-INF and WEB-INF is in the same level > with /index.jsp but simply, not working when i ref. the context as > /WEB-INF/admin No remote client should be able to directly access anything in /WEB-INF/ unless you have really done some damage to your server. - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJUJA/9AAoJEBzwKT+lPKRYeTYP/ArKK6QUQvbLTpIOWn4Pg4Ha Uys9JOuv0nCLHXj3B7Y21vRwc0fuRvfdjN4J0VML+K0kWUqt4Tp8AkDBTSG7yD2P tIsUXUUlcOpa1p998d3xtdkLcHQpTkn7nhpcnJwcOQqUUFesKwP9HYNBQI5m5pKX s/IcX1cj0AV2rXMjOBK1RWU7WZPQGUVR2RRNtVS0Nc4w9RlYyjQjA+hBxpUFG1HS 91OdkcX7sJxerlsIAfewTdYZ1oVd/3KGFlj+zSFcv9E17sOdpvBy+HuFdU9kGkQF QDCBagmoFNrZmzPktNC0r5BXn1RDOdZ2wAsI9D+ZQyTTG4CPdXZvJRflRIX1QWZe jjj8ZhlAH2nrLuKHNnwqWY9KK9GHc7+zs3H6hfe7JuJ/i8Z5u2lwrfK7DpquyUK+ gcircWL0dEmosmvNWfm3/G+MvyudgUrDihgiuYZY2s1g5CWRr48TAkhEadr4cdOb OOMcVTQOyzPLkeNA+5vBBDDEn3dzUq42Semds3HNByumM7Z7/DkALFQ0FYLxk6wd spjeYFZP1IFjq5R8Ipdr0NngCmoVzqSnBowYgayvBfIO8P89u6i1Q0KjsL1SVefx RmpJhevt/TSPcHurQpM/4tSQnQQqOXorTkAnKxw6csDiaY7IDEtBnTti2dIMe2Ny yOF8Ee0Tn2XgILN24ogQ =JV6J -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
