Tomcat - Block Access to URL on Remote Address Base

Hi Everybody!
I have a webapplication runnning under "localhost/abc" on Tomcat.
Now I want the address "localhost/abc/def" to be only available for the localhost.
I tried configuring a valve <Valve className="org.apache.catalina.valves.RemoteAddrValve" ... but it only works for the whole context "localhost/abc". Not for the subfolder.
How can I achive this goal?
Thanks in Advance!
Stef

No one has an idea?
I can't believe it! ;)

Similar Messages

Wrt54gs - allow access by url ?

Is it possible to allow access by URL, instead of blocking access by URL?
(fox example - to allow the kids to access disney.com and nothing else)
I know a similar question was asked earlier, but it was over 2 years ago. Apparently the wrt54 was not capable of this. I'm wondering if there may be any new developments.
Thanks.

Sorry, no this is not available. Sounds like what you want is a software network manager like Netnanny. http://www.netnanny.com/

I have lost my iPad. I fear it has fallen into wrong hands. How do I block access remotely?

I have lost my ipad at a supermarket. I fear it has been taken. I would like to retrace it and/or block access to it as soon as possible. I am not sure if I activated "find my ipad," before it was lost. It is linked and synced with my MacbookPro. It is wifi activated and has a micro simcard which is also acrive.

Go to icloud.com on your computer and see if you can locate it, as explaned here: http://help.apple.com/icloud/#mmfc0f2442. It will only work if you have Find My iPad enabled, and it has a connection to the internet with your settings unchanged. You have the option to lock it or erase it remotely if it can be tracked (http://help.apple.com/icloud/#mmfc0f0165). However, if you erase it you will no longer be able to track it.

Upgraded to Maverick. Now cannot connect to wifi. All my other devices will connect. Have rest wireless hot spot switch and cable modem. Other devices still connect but MacPro does not. MacPro wireless is self assigning an IP address blocking access.

Upgraded to Maverick. Now cannot connect to wifi. All my other devices will connect. Have rest wireless hot spot switch and cable modem. Other devices still connect but MacPro does not. MacPro wireless is self assigning an IP address blocking access. It will connect if I connect to my iPhone hot spot via wifi. Any ideas?

If you follow this video you'll see how to delete your WiFi AP from the OS, this will allow you to select it again which I feel will correct your problem.
https://app.box.com/s/fe7v7h7kywjr23spumqp

Since switching to Firefox 4 I'm unable to access a web page by pressing "Enter" after typing the url in the address bar; I now have to click on the bar; how do I change things so that I can go back to a keyboard shortcut?

I use keyboard shortcuts whenever possible but since updating to Firefox 4 I can no longer access a web page simply by pressing "Enter" after typing the url in the address bar. Can I get back to this useful shortcut somehow and avoid having to fiddle with a mouse?

Start Firefox in <u>[[Safe Mode]]</u> to check if one of the extensions is causing the problem (switch to the DEFAULT theme: Firefox (Tools) > Add-ons > Appearance/Themes).
* Don't make any changes on the Safe mode start window.
* https://support.mozilla.com/kb/Safe+Mode
If it does work in Safe-mode then disable all extensions and then try to find which is causing it by enabling one at a time until the problem reappears.
* Use "Disable all add-ons" on the [[Safe mode]] start window to disable all extensions.
* Close and restart Firefox after each change via "File > Exit" (Mac: "Firefox > Quit"; Linux: "File > Quit")
* [[Troubleshooting extensions and themes]]

Need software to block access to certain websites at night

OK. I'm going to admit it. I've got a shopping compulsion that's somewhat out of control when I get tired at night.
Anyone have suggestions for software or another method to block access, ideally to just forms, or just certain websites, between certain times? I know if I'm the admin I'd be able to get around it, but it would help stop me from buying when I'm not awake enough to make good decisions.
I'm thinking a children's filter would work, but none of them seem to go more specific than turning off the internet entirely between certain times, and that's a bit too broad. In any case, I'm pretty sure I could script just turning off the Airport link for a time if that's what I really wanted.
Any suggestions for scripting the Airport config or other site lookup files (the ones that say ebay.com -> this address), perhaps? That would keep me from getting on with the iPhone too.
Thanks, and
Aym

AymR wrote:
Maybe I just need to make my own scripts... I know if I'm the admin I'd be able to get around it, but it would help...
You might try the script below. It works by looping through a predefined list of text items, comparing each item to the URL of the frontmost Safari document. When a match is found, the frontmost document is replaced by a blank page. A dialog then appears informing you that you've attempted to reach a prohibited web site.
The script below should be copied and pasted into your AppleScript Script Editor. From the Editor's File menu choose Save As > File Format: application. Be sure to check Stay Open under Options. Once saved, the script can be launched from the dock or desktop, or launched as part of a repeating iCal event, with iCal's alarm feature set to open the script file at a certain time each day. Once running, the script can be stopped at any time by selecting its docked icon and choosing Quit from the menu.
+The script:+
*property prohibited_list : {"ebay.com", "amazon.com", "shopping.yahoo.com"} --> add or remove items as desired*
*on idle*
*tell application "System Events"*
*if exists application process "Safari" then*
try
*tell application "Safari"*
*set x to URL of front document*
*set y to every character of x as text*
*repeat with an_item in prohibited_list*
*if an_item is in y then*
*set the URL of front document to ""*
*tell application "System Events"*
activate
*display dialog "You have attempted to access a prohibited web site." with icon stop buttons ("OK") default button 1 giving up after 10*
*end tell*
*tell application "Safari" to activate*
*end if*
*end repeat*
*end tell*
*end try*
*end if*
*end tell*
*return 5*
*end idle*
Good luck.
+The script was tested in Mac OS 10.4.11. Leopard and Snow Leopard users' results may vary.+

Block just specific url's when using 5512/CX/WSE

We just migrated from a 5510 and a barracuda web filter to a 5512 with the sofware CX web security essentials filtering. We can get the filtering to work but it's blocking sharefile even when it's exempted. We're able to login and upload but all downloads fail. On the ASA can anyone give me an example of how to make a service policy that allows traffic to the sharefile hostnames or ip addresses, or a suggestion of finding out what would cause the sharefile downloads to fail.
ASA version 9.1.1-
Thanks,
Ben

In article <[email protected]>, Twellons wrote:
> I have entered a URL block with http://*.play.it* Which blocks
> access via a browser ( Although it doesn't seem to be a webpage out
> there and google searches don't show me much ).
>
> Does that make this a different protocol even though RTMonitor is only
> scanning for HTTP activity ?
>
RTmonitor is only showing what the proxy is proxying, so you can be
pretty sure it is http traffic. (RTMonitor should show the full URL in
case there is something else going on.
> If so , does anyone have any suggestions on how to block this site ?
>
Try variations on the wildcards (add more attempts to the same rule.
Like http://*.content.it/*)
Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

Using .htaccess file to block access from certain networks

Does anybody have any tips on getting a .htaccess file to work to block access to my Web Access server from certain network ranges on SuSE 10 SP3 with GW 8.0.2.
It does seem like the file does anything? With Web Access I'm not exactly sure where to put the file. I used to accomplish this using iptables, but I was seeing if I could do the same with .htaccess.
Thanks!

Originally Posted by bbilut
Does anybody have any tips on getting a .htaccess file to work to block access to my Web Access server from certain network ranges on SuSE 10 SP3 with GW 8.0.2.
It does seem like the file does anything? With Web Access I'm not exactly sure where to put the file. I used to accomplish this using iptables, but I was seeing if I could do the same with .htaccess.
Thanks!
You can block a range with the .htaccess file, for example by defining the range as
Code:
order allow,deny
deny from 10.0.
allow from all
...that would block all 10.0.0.0 upto 10.0.255.255 addresses
You cannot use this file in tomcat, so useless I think... but as Apache is used as frontend for the tomcat webacc application and you might be able to edit the gw conf apache files to include the range denies (which by default can be found in /etc/opt/novell/groupwise/webaccess/gw.conf).
Maybe this thread might help as there are some examples in howto include denies in the .conf files.
Deny IP Ranges in httpd.conf Apache Web Server forum at WebmasterWorld
Do make a backup of you current gw.conf in case it blows up :)
-Willem

Blocking access to file sharing (AFP/SMB) from outside of network

Hello all,
Is there a way to block access to file shares from outside of our LAN? I have a machine that has some sharing turned on (it is also my email server) and I can reach it across the internet and mount shares as if I was in the office.
How can I block this access? Both SMB and AFP?
Thank you,
-John

Justin, thank you for your reply. The machine is on a public ip address and is not behind a NAT router. I've turned on the software firewall and that is working now. However, I imagine it would be better to use a hardware firewall. Any suggestions on a good one? Thank you.

Coherence::net::messaging::ConnectionException: could not establish a connection to one of the following addresses: {10.242.152.242/10.242.152.242:8088}; make sure the "remote-addresses" configuration element contains an address and port of a running TcpA

Hi
I have installed coheI have installed coherence server "fmw_12.1.3.0.0_coherence_Disk1_1of1.zip" along with Examples on windows machine and C++ client coherence-cpp-12.1.3.0.0b51709-windows-x86-vs2012.zip on the same machine.
I have built the "contacts" C++ Example successfully and while I execute this "contacts" using run I am facing TcpAcceptor error.
On my coherence server the TcpAcceptor is listening on port 8088, so I have modified the extend-cache-config.xml file with values "ip address of my windows machine" and port as "8088".
All the time I am getting below error,
coherence::net::messaging::ConnectionException: could not establish a connection to one of the following addresses: {10.242.152.242/10.242.152.242:8088}; make sure the "remote-addresses" configuration element contains an address and port of a running TcpAcceptor
    at class coherence::lang::TypedHandle<class coherence::component::net::extend::PofConnection> __thiscall coherence::component::util::TcpInitiator::openConne
ction(void)(TcpInitiator.cpp:307)
    at coherence::component::util::TcpInitiator::openConnection
    at coherence::component::util::Initiator::ensureConnection
    at coherence::component::net::extend::RemoteCacheService::openChannel
    at coherence::component::net::extend::RemoteService::doStart
    at coherence::component::net::extend::RemoteService::start
    at coherence::component::util::SafeService::startService
    at coherence::component::util::SafeService::restartService
    at coherence::component::util::SafeService::ensureRunningServiceInternal
    at coherence::component::util::SafeService::start
    at coherence::net::DefaultConfigurableCacheFactory::configureService
    at coherence::net::DefaultConfigurableCacheFactory::ensureService
    at coherence::net::DefaultConfigurableCacheFactory::ensureRemoteCache
    at coherence::net::DefaultConfigurableCacheFactory::configureCache
    at coherence::net::DefaultConfigurableCacheFactory::ensureCache
    at coherence::net::CacheFactory::getCache
    at unsigned __int64 coherence::lang::class_spec<class coherence::lang::Managed<class ContactId>,class coherence::lang::extends<class coherence::lang::Object,class coherence::lang::Void<class coherence::lang::Object> >,class coherence::lang::implements<void,void,void,void,void,void,void,void,void,void,void,void,void,void,void,void> >::sizeOf(bool)
    at _onexit
    at class coherence::util::Hashtable * coherence::lang::factory<class coherence::util::Hashtable>::create(void)
    at class coherence::util::Hashtable * coherence::lang::factory<class coherence::util::Hashtable>::create(void)
    at BaseThreadInitThunk
    at RtlInitializeExceptionChain
    at RtlInitializeExceptionChain
    on thread "main"
Caused by: coherence::net::messaging::ConnectionException: coherence::component::util::TcpInitiator::TcpConnection@029EAD78{Id=NULL, Open=1, LocalAddress=NULL,
RemoteAddress=10.242.152.242/10.242.152.242:8088}: socket disconnect
    at class coherence::lang::TypedHandle<class coherence::net::messaging::Response> __thiscall coherence::component::net::extend::AbstractPofRequest::Status::g
etResponse(void)(AbstractPofRequest.cpp:203)
    at coherence::component::net::extend::AbstractPofRequest::Status::getResponse
    at coherence::component::net::extend::AbstractPofRequest::Status::waitForResponse
    at coherence::component::util::Initiator::openConnection
    at coherence::component::net::extend::PofConnection::open
    at coherence::component::util::TcpInitiator::openConnection
    at coherence::component::util::Initiator::ensureConnection
    at coherence::component::net::extend::RemoteCacheService::openChannel
    at coherence::component::net::extend::RemoteService::doStart
    at coherence::component::net::extend::RemoteService::start
    at coherence::component::util::SafeService::startService
    at coherence::component::util::SafeService::restartService
    at coherence::component::util::SafeService::ensureRunningServiceInternal
    at coherence::component::util::SafeService::start
    at coherence::net::DefaultConfigurableCacheFactory::configureService
    at coherence::net::DefaultConfigurableCacheFactory::ensureService
    at coherence::net::DefaultConfigurableCacheFactory::ensureRemoteCache
    at coherence::net::DefaultConfigurableCacheFactory::configureCache
    at coherence::net::DefaultConfigurableCacheFactory::ensureCache
    at coherence::net::CacheFactory::getCache
    at unsigned __int64 coherence::lang::class_spec<class coherence::lang::Managed<class ContactId>,class coherence::lang::extends<class coherence::lang::Object
,class coherence::lang::Void<class coherence::lang::Object> >,class coherence::lang::implements<void,void,void,void,void,void,void,void,void,void,void,void,void
,void,void,void> >::sizeOf(bool)
    at _onexit
    at class coherence::util::Hashtable * coherence::lang::factory<class coherence::util::Hashtable>::create(void)
    at class coherence::util::Hashtable * coherence::lang::factory<class coherence::util::Hashtable>::create(void)
    at BaseThreadInitThunk
    at RtlInitializeExceptionChain
    at RtlInitializeExceptionChain
    on thread "main"
Caused by: coherence::io::IOException: socket disconnect
    at unsigned int __thiscall coherence::net::Socket::readInternal(unsigned char *,unsigned int)(Socket.cpp:333)
    at coherence::net::Socket::readInternal
    at coherence::net::Socket::SocketInput::read
    at coherence::io::BufferedInputStream::fillBuffer
    at coherence::io::BufferedInputStream::read
    at coherence::component::util::TcpInitiator::readMessageLength
    at coherence::component::util::TcpInitiator::TcpConnection::TcpReader::onNotify
    at coherence::component::util::Daemon::run
    at coherence::lang::Thread::run
    on thread "ExtendTcpCacheService:coherence::component::util::TcpInitiator:coherence::component::util::TcpInitiator::TcpConnection::TcpReader"

We are facing same issue.    Could you please provide us any working .Net sample code for the version 12.1.2.0.
<ssl>
              <protocol>Tls</protocol>
              <local-certificates>
                <certificate>
                  <url>c:\Cert\</url>
                  <password>password</password>
                  <flags>DefaultKeySet</flags>
                </certificate>
              </local-certificates>
            </ssl>
thanks
Bala

Block access through listener by IP Range - Wildcard

Hi,
I know you can block access to oracle database through listener using following configuration in sqlnet.ora
tcp.validnode_checking = yes
tcp.invited_nodes = (hostname1, hostname2)
tcp.excluded_nodes = (192.168.10.3)but, is there a way to give IP-Range rather than giving individual address one-by-one.
for e.g
tcp.validnode_checking = yes
tcp.invited_nodes = (192.168.10.*,192.168.20.*)
tcp.excluded_nodes = (192.168.222.*,192.168.333.*)Thanks.

Hi,
CMAN is part of enterprise version to much expensive!
Use:
tcp.validnode_checking = yes
tcp.invited_nodes = (192.168.10.1/24,192.168.20.1/24) # /24 = 0..255
tcp.excluded_nodes = (192.168.10.64/26,192.168.20.64/26) # /26 = 0..63
# So from 192.168.10.1..192.168.10.63, 192.168.10.128..192.168.10.255
# So from 192.168.20.1..192.168.20.63, 192.168.30.128..192.168.20.255
François

Ironport S160 Access Policy URL Category not working

I have created a custom URL category "Allowed Sites" and put some sites in there that I want the proxy not to block and ticked the "Allow" field in my Access Policy.
Those sites also match the predefined URL category "Online Storage and Backup" which is blocked.
When I try to access those websites, the proxy blocks them saying they belong to the above predefined category.
Now, how can I allow those few sites, but not the whole predefined category??? Why is my custom category not being considered? URLs in there look like .example.com, .example2.com
Any help appreciated,
Kat

Hi Kush,
find attached the screenshot of the Access Policy with only the first few lines of the Predefined URL Categories. Also the category I created with "mozy.com" and others in it.
This is the output of a policy trace for a user that is assigned to this Access Policy when testing the URL in question "mozy.com"
URL Check
WBRS Score: 6.5
URL Category: Online Storage and Backup
Policy Match
IronPort Data Security policy: None
Decryption policy: None
Routing policy: None
Identity policy: NTLM_Identity
Access policy: exHSP
Final Result
Request blocked
Details: Request blocked based on URL category
Trace session complete
I'll do the tail and later today.
Kat

Why does firefox keep blocking access to social websites like facebook etc????

any time i try to go on any social website i get this msg :
Web Page Blocked
Access to the web page you were trying to visit has been blocked in accordance with company policy. Please contact your system administrator if you believe this is in error.
User: 10.150.46.8
URL: www.taggedmail.com/new_invites.html?ect=by6lqzxg_fid=663B91D2D7B5A27B_al=sRaB9KH0z_md.1je2Y4.52mvph_tn=bWVzc2FnZXNfbmV3LTEtMy0xLTc=_linkId=new_invites_link_2
Category: social-networking
Click here to login
this msg happens with any social network i go on so why is this happening????????????

thats not true becuz this didnt start happening til i downloaded firefox becuz when i was using internet explorer i didnt have one problem but then i download firefox and i get blocked msgs

Is there a way to access my Time Capsule remotely when I only have a MacBook?

I heard that in order to access my Time Capsule remotely, I need to have more then one Mac. I that true?
I bought a TC, of course to make backups of my system, but I also bought it because I was told it could be used for 'cloud' storage . Can anyone help me out with this?
I have my TC set up on Bridgemode as I cannot turn off NAT on the router it is connected to.
BTW, I'm totally new to Mac (2 weeks), so please dumb it down as much as possible for me... Thx!!!

The port forwarding set up on my router looks like this:
I use port 8888 for both Public UDP and Private TCP Ports. Your provider may have a different port for you to use on your specific modem/router.
The Private IP Address is the fixed IP that my router assigns to the Time Capsule on the local network. Your router likely is using the 192.168 range, so your information here will look something like 192.168.1.25 for example.
You must use 548 for the Private UDP Port Setting and the same port 548 for the Private TCP Port on your modem/router setup.
Once the modem/router is set up with the required information, you can try to log onto your network.
Click the Finder Menu on your Mac on the lower left of the dock
Click the Go Menu at the top of the screen
Enter in the following in the address bar:
afp://staticIPaddress:portnumber
For example, say that my ISP has assigned me a Static IP address of 72.111.222.33
Then, the setting on my Mac would look like this:
afp://72.111.222.33:8888
Then, click Connect
You will be asked for the device password to connect to the Time Capsule

Blocking Access from Ubuntu 9.04 Virtual Machine

Hi Everyone
We have blocked access on Perimeter Routers for Some specific ports like telnet , SSH etc
and as per access policy users are granted access within the organisation for Servers at Data Centre based on there IP addresses
If some body installs Ubuntu 9.04 Virtual Machine and then invokes virtual XP some how the user gets 10 series IP and still manages to access the servers
How can i block the same
While checking for IP Accounting on Router there are no traces on the Vitual IP but server login details shows the IP address from whcih accessed with source IP as 10.x.x.x
Regards
Sohail Sarwar

user8750410 wrote:
I need C Api to connect from Ubuntu 9.04 to Oracle 8 database, is ODBC the only way to do this ? There is an opensource solution to connect without installing database on the client machine ?You certainly dont need a full database install on the ubuntu client, client components only are required.
Because your target is a downrev oracle database version you might need to use client compoents like linux 9i to be successful :- [http://www.oracle.com/technology/software/products/oracle9i/htdocs/linuxsoft.html]. The more modern 'instantclient' [http://www.oracle.com/technology/software/tech/oci/instantclient/index.html], [http://www.oracle.com/technology/tech/oci/instantclient/index.html] does not appear available at this verion. Its possilble this version might have issues when installing this version on ubuntu 9.04 ... i simply don't know and too hard for me to look up.
I personally am unaware of any thin client driver technology that would help you here, that isnt to saythere isnt one.
This si not an area i am now current in, i merely really wish to say you do not need a full database install.

Tomcat - Block Access to URL on Remote Address Base

Similar Messages

Maybe you are looking for