On 18/02/2010 15:42, Curtis Garman wrote:
Is this something new for tomcat 6?...I was told there was a security
vulnerability there with tomcat 5

I don't see an address property in either of the below:

 http://tomcat.apache.org/tomcat-5.5-doc/config/server.html


http://svn.apache.org/repos/asf/tomcat/tc5.5.x/trunk/container/catalina/src/share/org/apache/catalina/Server.java

And the implementation listens to 127.0.0.1 if I'm not mistaken:


http://svn.apache.org/repos/asf/tomcat/tc5.5.x/trunk/container/catalina/src/share/org/apache/catalina/core/StandardServer.java


p


On Thu, Feb 18, 2010 at 9:27 AM, Pid <p...@pidster.com
<mailto:p...@pidster.com>> wrote:

    On 18/02/2010 15:14, Curtis Garman wrote:

        I'm moving from tomcat 5.5.25 to tomcat 6.0.18 and have noticed
        one problem.
        I use to be able to define the following in my server.xml

        <Server port="8005" shutdown="SHUTDOWN" *address="127.0.0.1"*>
        ...
        </Server>

        but now the address portion won't work...I only want shutdown
        commands to be
        able to come from localhost...can someone help me? I don't know
        if the
        syntax just changed or what.


    Define "won't work".

    Tomcat only listens on the localhost address on that port anyway,
    netstat (or a similar tool) will show you which address each port is
    listening on.



    p




    ---------------------------------------------------------------------
    To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
    <mailto:users-unsubscr...@tomcat.apache.org>
    For additional commands, e-mail: users-h...@tomcat.apache.org
    <mailto:users-h...@tomcat.apache.org>




--
Curtis Garman
Web Programmer
Heartland Community College


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to