Removing the Invokers
HTTP Invokers
If you want to remove the HTTP invokers (which are used if you 'tunnel' your requests through HTTP) simply remove the according deployments/directories from the .../deploy/ directory.
Please be aware that HTTP invokers are something different than the Tomcat HTTP Connector (the HTTP invokers need the HTTP connector but the HTTP connector does not need the HTTP invokers).
HTTPInvoker for JNDI, EJB and JMX
Simply remove the .../deploy/http-invoker.sar/ directory from your configuration all together.
HTTPInvoker for JMS
Remove the .../deploy/jms/jbossmq-httpil.sar directory completly.
Other invokers
There are a lot of other invokers bound to different ports. If you don't need them you may remove them. Otherwise secure them if they are reachable by folks you don't fully trust.
Comments