I am by no means a network configuration specialist, so take what I say with
a grain of salt :)

You havn't mentioned how Tomcat is accessed from the internet, such as do
you have a Apache or IIS, server acting as a proxy/redirector to tomcat, or
whether tomcat itself is internet facing. If you have a separate web server
infront of tomcat, then the web server only needs to be configured with the
URI's to pass through to tomcat for your web application AND NOT specify
those URIs for the manager app. That way you can access the manager app from
the internal network by directly going to tomcat, but the external internet
users will never be able to access it, because no path exists to it for
them.

If however you tomcat is internet facing (not an option I would recommend)
then I wouldn't know how you should properly deal with that. At least have a
good password :)

Regards,
Shane

-----Original Message-----
From: Richard S. Huntrods [mailto:[EMAIL PROTECTED]
Sent: Tuesday, 4 May 2004 1:41 PM
To: [EMAIL PROTECTED]
Subject: Help with manager app


I have a rather urgent problem. I have been using tomcat for several
years now, and normally weather the upgrades with some few problems, but
nothing serious - until now.

My problem - in the old Tomcat, I used the manager application to
monitor the number of users accessing the system. In the old version, I
had it set up so that external requests could NOT see the manager, ever.

Now, under the new Tomcat, the manager app has changed. Today I also
noticed that it is also available to the internet.

How do I restrict access to the manager application to the local network
- i.e. how do I turn off internet access to the manager app?

Thanks in advance,

-Richard


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to