-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

James,

On 11/18/16 2:39 PM, Christopher Schultz wrote:
> James,
> 
> On 11/18/16 2:06 PM, James H. H. Lampert wrote:
>> On 11/18/16, 9:08 AM, Caldarale, Charles R wrote:
>>> No, 8009 is the default port for communication between httpd
>>> and Tomcat.  8005 is the default shutdown port.
> 
>>> Correct.  If you're not using it, remove (or comment out) the 
>>> declaration.
> 
>> Fascinating.
> 
>> Can somebody point me to the right docs, so I can learn more
>> about this?
> 
> There are a couple of resources.
> 
> The first would be to have a look at the stock server.xml that
> comes with Tomcat, since you can find the AJP Connector on port
> 8009 defined in there. I'm not sure there is any documentation on
> the web that says what the default configuration is... because it's
> just so easy to look.
> 
> The second would be the configuration guide's coverage of the AJP 
> connector[1], which will largely be irrelevant to you.
> 
> If you aren't using AJP for anything, you should probably just
> disable it by commenting-out the <Connector> element, or deleting
> it entirely.
> 
> AJP is only useful if you have a reverse-proxy out in front of
> Tomcat and you'd like to use AJP as the communication protocol
> between that proxy and Tomcat. No proxy = no AJP, unless you are
> running some weird kind web browser that for some reason
> understands AJP.

Oh, one more thing: if someone is probing your network, you might want
to find out who it is. It might be a basic security scan by a blue
team, or it could be malware scanning the network to see if anything
interesting is available.

- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=ey8d
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to