25 messages in org.apache.tomcat.usersRe: securing tomcat...| From | Sent On | Attachments |
|---|---|---|
| Julian Löffelhardt | Dec 30, 2002 11:36 am | |
| Wagoner, Mark | Dec 30, 2002 11:48 am | |
| Jerome "Lacoste (Frisurf)" | Dec 30, 2002 11:51 am | |
| Julian Löffelhardt | Dec 30, 2002 12:29 pm | |
| Julian Löffelhardt | Dec 30, 2002 12:29 pm | |
| Paul Yunusov | Dec 30, 2002 12:30 pm | |
| Justin L. Spies | Dec 30, 2002 12:34 pm | |
| Remy Maucherat | Dec 30, 2002 12:39 pm | |
| Craig R. McClanahan | Dec 30, 2002 12:43 pm | |
| mech | Dec 30, 2002 12:50 pm | |
| Torsten Fohrer | Dec 30, 2002 2:38 pm | |
| Dan Payne | Dec 30, 2002 2:42 pm | |
| Peiqiang Han | Dec 30, 2002 3:04 pm | |
| Julian Löffelhardt | Dec 30, 2002 4:55 pm | |
| Jerome "Lacoste (Frisurf)" | Dec 31, 2002 2:42 am | |
| Luc Foisy | Dec 31, 2002 7:43 am | |
| Goehring, Chuck Mr., RCI - San Diego | Dec 31, 2002 12:28 pm | |
| Jason Pyeron | Dec 31, 2002 12:55 pm | |
| Ken Anderson | Dec 31, 2002 2:06 pm | |
| Brian Topping | Dec 31, 2002 2:44 pm | |
| Gary Gwin | Dec 31, 2002 4:03 pm | |
| Triptpal Singh Lamba | Dec 31, 2002 5:21 pm | |
| Will Hartung | Jan 2, 2003 2:27 pm | |
| Julian Löffelhardt | Jan 2, 2003 5:38 pm | |
| Will Hartung | Jan 2, 2003 6:53 pm |
| Subject: | Re: securing tomcat... | |
|---|---|---|
| From: | Ken Anderson (ka...@pacific.net) | |
| Date: | Dec 31, 2002 2:06:45 pm | |
| List: | org.apache.tomcat.users | |
Just put this in your web.xml for root webapp or others...
<error-page> <error-code>404</error-code> <location>/404error.html</location> </error-page>
and create 404error.html to say whatever you like.
Ken
Jason Pyeron wrote:
has any one put together a faq/howto on securing tomcat?
our first goal is to prevent determination of the server version by a web client.
an example of this is for url http://127.1:8080/xxdfsdf this is returned, note
the Server:
Apache Coyote/1.0 and Apache Tomcat/4.1.12
HTTP/1.1 404 /xxdfsdf Content-Type: text/html;charset=ISO-8859-1 Content-Language: en-US Transfer-Encoding: chunked Date: Tue, 31 Dec 2002 20:46:09 GMT Server: Apache Coyote/1.0
<html><head><title>Apache Tomcat/4.1.12 - Error report</title><STYLE><!--H1{font-family : sans-serif,Arial,Tahoma;color : white;background-color : #0086b2;} H3{font-family : sans-serif,Arial,Tahoma;color : white;background-color : #0086b2;} BODY{font-family : sans-serif,Arial,Tahoma;color : black;background-color : white;} B{color : white;background-color : #0086b2;} HR{color : #0086b2;} --></STYLE> </head><body><h1>HTTP Status 404 - /xxdfsdf</h1><HR size="1" noshade><p><b>ty pe</b> Status report</p><p><b>message</b> <u>/xxdfsdf</u></p><p><b>description</b> <u>The requested resource (/xxdfsdf) is not available.</u></p><HR size="1" noshade><h3>Apache Tomcat/4.1.12</h3></body></html>