Re: obtaining consumer IP

[Robert Gombotz]

Great!

Thanks for your advice as well. What I am doing now is purely
academic, so it doesn't have to pass the real-world test :-)

Rob


On 4/26/05, Tim K. (Gmane) [EMAIL PROTECTED] wrote:
 From the MessageContext you can get the HttpServletRequest and from
 that the IP:
 
 HttpServletRequest req = (HttpServletRequest)
 msgContext.getProperty(org.apache.axis.transport.http.HTTPConstants.MC_HTTP_SERVLETREQUEST);
 
 String ip = req.getRemoteAddr();
 
 However, keep in mind that the IP address may be misleading if the
 client is going through a proxy or you have a load balancer in front of
 your server or a caching server, etc. I know in a real production system
 you will most likely get a local IP address.  Also, if you want to do
 security based on the IP address, keep in mind that IP addresses can be
 easily spoofed. For this reason I find relying on the IP address to be a
 bad plan.
 
 Tim
 
 
 Robert Gombotz wrote:
 
 Hi!
 
 
 I would need to obtain the IP address of clients/consumers that make
 calls to my Web services, preferably using a SOAP handler.
 So far, I have not found a way of achieving this. The MessageContext
 seems to be the only data I have in a handler, and from what I
 understand it does not contain the client's IP.
 
 Any hints and ideas are greatly appreciated.
 
 
 Rob
 
 
 
 

obtaining consumer IP

[Robert Gombotz]

Hi!


I would need to obtain the IP address of clients/consumers that make
calls to my Web services, preferably using a SOAP handler.
So far, I have not found a way of achieving this. The MessageContext
seems to be the only data I have in a handler, and from what I
understand it does not contain the client's IP.

Any hints and ideas are greatly appreciated.


Rob

Re: obtaining consumer IP

[Tim K. (Gmane)]

From the MessageContext you can get the HttpServletRequest and from 
that the IP:

HttpServletRequest req = (HttpServletRequest) 
msgContext.getProperty(org.apache.axis.transport.http.HTTPConstants.MC_HTTP_SERVLETREQUEST);

String ip = req.getRemoteAddr();
However, keep in mind that the IP address may be misleading if the 
client is going through a proxy or you have a load balancer in front of 
your server or a caching server, etc. I know in a real production system 
you will most likely get a local IP address.  Also, if you want to do 
security based on the IP address, keep in mind that IP addresses can be 
easily spoofed. For this reason I find relying on the IP address to be a 
bad plan.

Tim

Robert Gombotz wrote:
Hi!
I would need to obtain the IP address of clients/consumers that make
calls to my Web services, preferably using a SOAP handler.
So far, I have not found a way of achieving this. The MessageContext
seems to be the only data I have in a handler, and from what I
understand it does not contain the client's IP.
Any hints and ideas are greatly appreciated.
Rob