Re: Finding the Apache httpd IP address when AJP is used

2015-05-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Paul, On 4/30/15 5:21 PM, Paul Klinkenberg wrote: You were totally on your way to come to the point where my original question was aimed at, and then suddenly, bam, a right turn ;-) That happened when you write getRemoteAddr() Returns the

Re: Finding the Apache httpd IP address when AJP is used

2015-05-01 Thread Paul Klinkenberg
Hi André, Paul Klinkenberg wrote: Hi André, Paul Klinkenberg wrote: Hi André, Paul Klinkenberg wrote: Hi Christopher, Thanks for taking the time to respond; again much appreciated. Your point, and André's, is understood. Security should not be done based on incoming IP address. With

Re: Finding the Apache httpd IP address when AJP is used

2015-05-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Paul, On 5/1/15 11:54 AM, Christopher Schultz wrote: Paul, On 4/30/15 5:21 PM, Paul Klinkenberg wrote: You were totally on your way to come to the point where my original question was aimed at, and then suddenly, bam, a right turn ;-) That

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread André Warnier
Paul Klinkenberg wrote: Hi Christopher, Thanks for taking the time to respond; again much appreciated. Your point, and André's, is understood. Security should not be done based on incoming IP address. With this current project, we off course want to deliver software which is secure by

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread Paul Klinkenberg
Hi Christopher, Thanks for taking the time to respond; again much appreciated. Your point, and André's, is understood. Security should not be done based on incoming IP address. With this current project, we off course want to deliver software which is secure by default. Now, if someone would

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 4/30/15 5:13 AM, André Warnier wrote: Paul Klinkenberg wrote: Hi Christopher, Thanks for taking the time to respond; again much appreciated. Your point, and André's, is understood. Security should not be done based on incoming IP

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Paul, On 4/30/15 3:24 AM, Paul Klinkenberg wrote: I never knew the remote_addr could not be trusted, but I believe you at once when you say so. I thought it was taken from the actual socket connection. With the exception of ajp by the way,

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Paul, On 4/29/15 10:18 PM, l...@bsoft.com.cn wrote: p.s. I asked this question, in other wording, on SackOverflow.com http://sackoverflow.com/ as well. I hope I have better luck here ;-)

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread Paul Klinkenberg
Hi André, Paul Klinkenberg wrote: Hi Christopher, Thanks for taking the time to respond; again much appreciated. Your point, and André's, is understood. Security should not be done based on incoming IP address. With this current project, we off course want to deliver software which is

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread Paul Klinkenberg
Hi André, Paul Klinkenberg wrote: Hi André, Paul Klinkenberg wrote: Hi Christopher, Thanks for taking the time to respond; again much appreciated. Your point, and André's, is understood. Security should not be done based on incoming IP address. With this current project, we off course

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread André Warnier
Paul Klinkenberg wrote: Hi André, Paul Klinkenberg wrote: Hi Christopher, Thanks for taking the time to respond; again much appreciated. Your point, and André's, is understood. Security should not be done based on incoming IP address. With this current project, we off course want to deliver

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread André Warnier
Paul Klinkenberg wrote: Hi André, Paul Klinkenberg wrote: Hi André, Paul Klinkenberg wrote: Hi Christopher, Thanks for taking the time to respond; again much appreciated. Your point, and André's, is understood. Security should not be done based on incoming IP address. With this current

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread Paul Klinkenberg
Hi Christopher, Paul, On 4/29/15 10:18 PM, l...@bsoft.com.cn wrote: p.s. I asked this question, in other wording, on SackOverflow.com http://sackoverflow.com/ as well. I hope I have better luck here ;-) http://stackoverflow.com/questions/29858030/where-can-i-find-the-apach

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Paul, On 4/30/15 11:27 AM, Paul Klinkenberg wrote: Hi Christopher, Paul, On 4/29/15 10:18 PM, l...@bsoft.com.cn wrote: p.s. I asked this question, in other wording, on SackOverflow.com http://sackoverflow.com/ as well. I hope I have

Re: Finding the Apache httpd IP address when AJP is used

2015-04-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Paul, On 4/29/15 11:17 AM, Paul Klinkenberg wrote: The reason I want to add the IP restriction in the valve, is to make 100% sure that the request (for creating a new Tomcat context) is indeed coming from the frontend webserver. I think there

Re: Finding the Apache httpd IP address when AJP is used

2015-04-29 Thread André Warnier
Paul Klinkenberg wrote: Hi Tomcat users! I have been working on an update for a Tomcat valve called mod_cfml. The project aims to provide automatic web context creation in Tomcat, when coming from a frontend webserver. The live code base can be found at https://github.com/utdream/mod_cfml

Re: Finding the Apache httpd IP address when AJP is used

2015-04-29 Thread André Warnier
As a P.S. : Maybe you should also look at this, to see if it would fit your needs : http://tomcat.apache.org/tomcat-8.0-doc/proxy-howto.html André Warnier wrote: Paul Klinkenberg wrote: Hi Tomcat users! I have been working on an update for a Tomcat valve called mod_cfml. The project aims to

Re: Finding the Apache httpd IP address when AJP is used

2015-04-29 Thread l...@bsoft.com.cn
Hi,Nice to meet you. l...@bsoft.com.cn From: Paul Klinkenberg Date: 2015-04-29 21:54 To: users@tomcat.apache.org Subject: Finding the Apache httpd IP address when AJP is used Hi Tomcat users! I have been working on an update for a Tomcat valve called mod_cfml. The project aims to provide

Re: Re: Finding the Apache httpd IP address when AJP is used

2015-04-29 Thread l...@bsoft.com.cn
Paul Klinkenberg wrote: Hi Tomcat users! I have been working on an update for a Tomcat valve called mod_cfml. The project aims to provide automatic web context creation in Tomcat, when coming from a frontend webserver. The live code base can be found at https://github.com/utdream/mod_cfml

Re: Finding the Apache httpd IP address when AJP is used

2015-04-29 Thread Paul Klinkenberg
Paul Klinkenberg wrote: Hi Tomcat users! I have been working on an update for a Tomcat valve called mod_cfml. The project aims to provide automatic web context creation in Tomcat, when coming from a frontend webserver. The live code base can be found at https://github.com/utdream/mod_cfml