Re: How to disable posting updates from a remote server

2009-06-10 Thread Michael Ludwig 

ashokc schrieb:

I find that I am freely able to post to my production SOLR server,
from any other host that can run the post command. So somebody can
wipe out the whole index by posting a delete query.


Control this at the IP level, have your server listen on 127.0.0.1
or on a private subnet address.

Michael Ludwig

Re: How to disable posting updates from a remote server

2009-06-04 Thread Eric Pugh 
Take a look at the security section in the wiki, u could do this with
firewall rules or password access.

On Thursday, June 4, 2009, ashokc ash...@qualcomm.com wrote:

 Hi,

 I find that I am freely able to post to my production SOLR server, from any
 other host that can run the post command. So somebody can wipe out the whole
 index by posting a delete query. Is there a way SOLR can be configured so
 that it will take updates ONLY from the server on which it is running?
 Thanks - ashok
 --
 View this message in context: 
 http://www.nabble.com/How-to-disable-posting-updates-from-a-remote-server-tp23876170p23876170.html
 Sent from the Solr - User mailing list archive at Nabble.com.