Re: Finding the Apache httpd IP address when AJP is used

2015-05-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Paul, On 5/1/15 11:54 AM, Christopher Schultz wrote: > Paul, > > On 4/30/15 5:21 PM, Paul Klinkenberg wrote: >> You were totally on your way to come to the point where my >> original question was aimed at, and then suddenly, bam, a right >> turn ;-

Re: Finding the Apache httpd IP address when AJP is used

2015-05-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Paul, On 4/30/15 5:21 PM, Paul Klinkenberg wrote: > You were totally on your way to come to the point where my original > question was aimed at, and then suddenly, bam, a right turn ;-) > That happened when you write "getRemoteAddr() Returns the In

Re: [OT] Finding the Apache httpd IP address when AJP is used

2015-05-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 4/30/15 2:39 PM, André Warnier wrote: > Christopher Schultz wrote: >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 >> >> Paul, >> >> On 4/30/15 3:24 AM, Paul Klinkenberg wrote: >>> I never knew the remote_addr could not be trusted, bu

Re: Finding the Apache httpd IP address when AJP is used

2015-05-01 Thread Paul Klinkenberg
Hi André, > Paul Klinkenberg wrote: >> Hi André, >>> Paul Klinkenberg wrote: Hi André, > Paul Klinkenberg wrote: >> Hi Christopher, >> Thanks for taking the time to respond; again much appreciated. >> Your point, and André's, is understood. Security should not be done >> b

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread André Warnier
Paul Klinkenberg wrote: Hi André, Paul Klinkenberg wrote: Hi André, Paul Klinkenberg wrote: Hi Christopher, Thanks for taking the time to respond; again much appreciated. Your point, and André's, is understood. Security should not be done based on incoming IP address. With this current proj

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread Paul Klinkenberg
Hi André, > Paul Klinkenberg wrote: >> Hi André, >>> Paul Klinkenberg wrote: Hi Christopher, Thanks for taking the time to respond; again much appreciated. Your point, and André's, is understood. Security should not be done based on incoming IP address. With this current

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread André Warnier
Paul Klinkenberg wrote: Hi André, Paul Klinkenberg wrote: Hi Christopher, Thanks for taking the time to respond; again much appreciated. Your point, and André's, is understood. Security should not be done based on incoming IP address. With this current project, we off course want to deliver s

Re: [OT] Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Paul, On 4/30/15 3:24 AM, Paul Klinkenberg wrote: I never knew the remote_addr could not be trusted, but I believe you at once when you say so. I thought it was taken from the actual socket connection. With the except

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread Paul Klinkenberg
Hi André, > Paul Klinkenberg wrote: >> Hi Christopher, >> Thanks for taking the time to respond; again much appreciated. >> Your point, and André's, is understood. Security should not be done based on >> incoming IP address. >> With this current project, we off course want to deliver software whi

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Paul, On 4/30/15 11:27 AM, Paul Klinkenberg wrote: > Hi Christopher, > >> Paul, >> >> On 4/29/15 10:18 PM, l...@bsoft.com.cn wrote: >>> p.s. I asked this question, in other wording, on >>> SackOverflow.com as well. I hop

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread Paul Klinkenberg
Hi Christopher, > Paul, > > On 4/29/15 10:18 PM, l...@bsoft.com.cn wrote: >> p.s. I asked this question, in other wording, on SackOverflow.com >> as well. I hope I have better luck here >> ;-) >> http://stackoverflow.com/questions/29858030/where-can-i-find-the-apach >

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Paul, On 4/29/15 10:18 PM, l...@bsoft.com.cn wrote: > p.s. I asked this question, in other wording, on SackOverflow.com > as well. I hope I have better luck here > ;-) > http://stackoverflow.com/questions/29858030/where-c

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 4/30/15 5:13 AM, André Warnier wrote: > Paul Klinkenberg wrote: >> Hi Christopher, >> >> Thanks for taking the time to respond; again much appreciated. >> >> Your point, and André's, is understood. Security should not be >> done based on

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Paul, On 4/30/15 3:24 AM, Paul Klinkenberg wrote: > I never knew the remote_addr could not be trusted, but I believe > you at once when you say so. > > I thought it was taken from the actual socket connection. With the > exception of ajp by the wa

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread André Warnier
Paul Klinkenberg wrote: Hi Christopher, Thanks for taking the time to respond; again much appreciated. Your point, and André's, is understood. Security should not be done based on incoming IP address. With this current project, we off course want to deliver software which is secure by default

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread Paul Klinkenberg
Hi Christopher, Thanks for taking the time to respond; again much appreciated. Your point, and André's, is understood. Security should not be done based on incoming IP address. With this current project, we off course want to deliver software which is secure by default. Now, if someone would in

Re: Re: Finding the Apache httpd IP address when AJP is used

2015-04-29 Thread l...@bsoft.com.cn
> Paul Klinkenberg wrote: >> Hi Tomcat users! >> I have been working on an update for a Tomcat valve called mod_cfml. The >> project aims to provide automatic web context creation in Tomcat, when >> coming from a frontend webserver. >> The live code base can be found at https://github.com/utdream

Re: Finding the Apache httpd IP address when AJP is used

2015-04-29 Thread l...@bsoft.com.cn
Hi,Nice to meet you. l...@bsoft.com.cn From: Paul Klinkenberg Date: 2015-04-29 21:54 To: users@tomcat.apache.org Subject: Finding the Apache httpd IP address when AJP is used Hi Tomcat users! I have been working on an update for a Tomcat valve called mod_cfml. The project aims to provide

Re: Finding the Apache httpd IP address when AJP is used

2015-04-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Paul, On 4/29/15 11:17 AM, Paul Klinkenberg wrote: > The reason I want to add the IP restriction in the valve, is to > make 100% sure that the request (for creating a new Tomcat context) > is indeed coming from the frontend webserver. I think there

Re: Finding the Apache httpd IP address when AJP is used

2015-04-29 Thread Paul Klinkenberg
> Paul Klinkenberg wrote: >> Hi Tomcat users! >> I have been working on an update for a Tomcat valve called mod_cfml. The >> project aims to provide automatic web context creation in Tomcat, when >> coming from a frontend webserver. >> The live code base can be found at https://github.com/utdream

Re: Finding the Apache httpd IP address when AJP is used

2015-04-29 Thread André Warnier
As a P.S. : Maybe you should also look at this, to see if it would fit your needs : http://tomcat.apache.org/tomcat-8.0-doc/proxy-howto.html André Warnier wrote: Paul Klinkenberg wrote: Hi Tomcat users! I have been working on an update for a Tomcat valve called mod_cfml. The project aims to

Re: Finding the Apache httpd IP address when AJP is used

2015-04-29 Thread André Warnier
Paul Klinkenberg wrote: Hi Tomcat users! I have been working on an update for a Tomcat valve called mod_cfml. The project aims to provide automatic web context creation in Tomcat, when coming from a frontend webserver. The live code base can be found at https://github.com/utdream/mod_cfml

Finding the Apache httpd IP address when AJP is used

2015-04-29 Thread Paul Klinkenberg
Hi Tomcat users! I have been working on an update for a Tomcat valve called mod_cfml. The project aims to provide automatic web context creation in Tomcat, when coming from a frontend webserver. The live code base can be found at https://github.com/utdream/mod_cfml