Oc4j behind apache - possible to prevent hitting oc4j port directly?

Question

Hello -
Is it possible to configure OC4J standalone running behind apache to accept only requests coming from apache instead of hitting OC4J's port (8888) ?
We use OC4J stand-alone (9.0.3) behind Apache (1.3.x). We use mod_proxy to send requests from apache to OC4J. The directives in httpd.conf look like this:
ProxyPass /myApp http://myserver.xyz:8888/myApp/
ProxyPassReverse /myApp http://myserver.xyz:8888/myApp/
Therefore, a user typing http://myserver.xyz/myApp will get their request sent to OC4J.
Question: Is it possible to configure OC4J so that it only responds to request going through mod_proxy. i.e., I want to PREVENT someone from accessing myApp by hitting 8888 directly through their browser. Possible?
Thanks.

Answer 1

Hi there,
if you specify the host in you web-site.xml (eg. <web-site host="127.0.0.1" port="8888" display-name="The Web Site">
), then oc4j should only respond to requests from localhost and shouldn't be available externally via apache...
all you should need then is to modify your proxypasses like so:
ProxyPass /myApp http://127.0.0.1:8888/myApp
ProxyPassReverse /myApp http://127.0.0.1:8888/myApp
hope this helps,
Andy