Are you using this with a cloud service?

This seems more like a misconfig of your setup. I have seen this in AWS
before where it routes to their internal IP due to a misconfiguration.

Owen Rubel
oru...@gmail.com


On Tue, Jun 4, 2024 at 6:26 PM Tom Robinson <tom.robin...@motec.com.au>
wrote:

> Hi Mark,
>
> On Tue, 4 Jun 2024 at 15:50, Mark Thomas <ma...@apache.org> wrote:
>
> > On 04/06/2024 05:07, Tom Robinson wrote:
> > > Hi,
> > >
> > > We are running a tomcat7 application
> >
> > You do realise that support for Tomcat 7 ended on 31 March 2021 don't
> you?
> >
>
> Yes, I do realise that tomcat7 is very old. We are running a legacy
> application not of our design.
>
> > on our LAN which gets redirected from
> > > a private, internal IP Address to an external ip address at which point
> > it
> > > fails. I can't find where this is happening.
> >
> > Is it an actual redirect - i.e. a 30x response? Or do you mean something
> > else?
> >
> > If a redirect, does it redirect on the first request?
> >
>
> OK, you are right, it's not a redirect (not a 30x response). I didn't think
> to go into developer mode on the browser to check this until now.
>
> > Where and what can I check for this redirect and how to control it or
> > > switch it off all together.
> >
> > Tomcat doesn't do this by default.
> >
> > Tomcat 7 doesn't have the redirect valve so it won't be that.
> >
> > Are you sure that the redirect is being issued by Tomcat? Might there be
> > a reverse proxy in mix somewhere?
> >
>
> No reverse proxies configured that I specifically know about.
>
>
> > Other than that, it would have to be in the application code somewhere.
> >
>
> In that case it must be as you say; i.e. in the code somewhere.
>
>
> > > I browse to here on our LAN:
> > >
> > > https://myinternalhost.mydomain.com.au:8443
> >
> > Check what myinternalhost.mydomain.com.au resolves to in terms of an IP
> > address.
> >
>
> Amongst other things, I administer the network, DNS and DHCP so I know that
> the name resolution is correct. I have re-checked to confirm.
>
> Try requesting a page that won't trigger a directory redirect. Something
> > like:
> >
> > https://myinternalhost.mydomain.com.au:8443/index.html
> >
> > You may need to adjust that for your application.
> >
>
> I found this in tomcat7/webapps/index.jsp:
>
> # cat index.jsp
> <%@ taglib uri="/tags/struts-logic" prefix="logic" %>
>
> <logic:redirect forward="logon"/>
>
> That's the entire file! I'm not really clued in to how that works but it
> does look like a code based redirect.
>
> This whole query has come about because I've been trying to secure the
> tomcat webapps with SSL. The certificate management in java is challenging
> having to use yet another certificate management tool (keytool).
>
> I realise now that I've just browsed to a default webapp running on tomcat.
> Further investigation shows that the other webapps (some 17 separate
> webapps) are indeed working correctly and SSL secured. I think I just
> panicked a little seeing the 'redirect' to an external IP and got
> bogged down unnecessarily into that redirect.
>
> For example, if I browse to:
>
> https://myinternalhost.mydomain.com.au:8443/legacyapp1
>
> the webapp runs, there is no redirect and it's SSL secured. The same for
> legacyapp[2-17].
>
> I appreciate and thank you for your help.
>
> Kind regards,
> Tom
>
>
> >
> > > I end up here:
> > >
> > > https://a.b.c.d:8443/kb
> > >
> > > Where a.b.c.d is our external, ISP provided IP Address.
> > >
> > > Why is this happening and how can I fix it?
> > >
> > > *Kind regards,*
> > >
> > > *Tom Robinson*
> > > *IT Manager/System Administrator*
> > >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> > For additional commands, e-mail: users-h...@tomcat.apache.org
> >
> >
>
> --
> *MoTeC Pty Ltd*
>
> 121 Merrindale Drive
> Croydon South 3136
> Victoria Australia
> *T: *61 3 9761 5050
> *W: *www.motec.com.au <https://www.motec.com.au/>
>
>
> --
>  <http://www.facebook.com/motec.global>
> <http://www.youtube.com/user/MoTeCAustralia>
> <https://www.instagram.com/motec_global/>
> <https://www.linkedin.com/company/motec-global>
>
>
> --
>  <https://www.thebatteryshow.eu/en/home.html>
>
> --
>
>
> Disclaimer Notice: This message, including any attachments, contains
> confidential information intended for a specific individual and purpose
> and
> is protected by law. If you are not the intended recipient you should
> delete this message. Any disclosure, copying, or distribution of this
> message or the taking of any action based on it is strictly prohibited.
>

Reply via email to