Filtering Servlets

[owenlee]

My web app has 2 servlets. And for some reason, one of them should only be accessible from localhost.

The 2 servlets do not need to be run on the same context (although more preferable). I tried to put them in separate context in standalone tomcat and use RemoteHostFilter valve to block the request. However, it is not possible to define context in JBoss. Then, how can I achieve the same goal?

Thanx in advance

[haraldgliebe]

Can't you do the this access check in an implementation of javax.servlet.Filter that is configured for the url of your protected servlet in web.xml? This would have the additional advantage of being independent of Tomcat.

Regards,
Harald