Pid wrote:
> Edward Song wrote:
>> Hi all, 
>>
>>  
>>
>> Just soliciting some feedback on how to effectively, thwart data mining on
>> our server.
>>
>>  
>>
>> We have a reactive solution when it comes to screen scraping and data mining
>> on Tomcat 5.5.  
>>
>> We simply find the offending IP's and add them to the deny rules using the
>> Valve - org.apache.catalina.valves.RemoteAddrValve
>>
>> >From what I understand, for changes to take effect, requires a restart of
>> Tomcat.
>>
>> I was thinking to override the RemoteAddrValve to retrieve offending IP's
>> from a file as well, so as not requiring a restart everytime an offending IP
>> is found.  
>>
>> Our applications then would be able to identify offending IP's, and based on
>> their own rules, add them to the file.  
> 
> it could be expensive to check the file for every request.
> if you're going to do that, then consider caching the file and using an
> internal thread to reload it periodically.

You could use JMX to update the list of denied IP addresses. Better yet,
just use iptables.


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to