Dashboard > BobsGear Main Space > Home > Hints for administration of Confluence > Stopping users from bypassing IIS or Apache when running Confluence behind a web server
Stopping users from bypassing IIS or Apache when running Confluence behind a web server
Added by Garnet R. Chaney, last edited by Garnet R. Chaney on Apr 11, 2007  (view change)
Labels: 


Atlassian recommends, for many good reasons, to run Confluence behind a web server such as IIS or Apache. They supply examples of how to setup various connectors, such as AJP, jarkata, and mod_proxy.

However, users could still go around the front end webserver at http://www.foo.com to get to the standalone installation of Confluence by requesting pages from Port 8080, as in http://www.foo.com:8080.

It would be nice to disallow that at the machine, instead of relying on a front end firewall to block the access.

That is, it would be nice to edit conf/server.xml so that the connector only worked on port 8080 of a certain address, like 127.0.0.1

References

Powered by Atlassian Confluence, the Enterprise Wiki. (Version: 2.4.3 Build:#705 Mar 21, 2007) - Bug/feature request - Contact Administrators
Complete Wiki Notation Guide