This content has been marked as final.
Show 5 replies
-
1. Re: AS 4.2.1 - http://example.com:8080/ gives
jaikiran Sep 21, 2007 3:26 AM (in response to konstandinos)Have a look at http://wiki.jboss.org/wiki/Wiki.jsp?page=JBoss42FAQ
-
2. Re: AS 4.2.1 - http://example.com:8080/ gives
konstandinos Sep 21, 2007 3:39 AM (in response to konstandinos)firstly thanks for the speedy reply. i changed my startup script and it now works. it _is_ a development environment so no too concerned with security yet. having said that could you please clarify the following (quoted from the FAQ page you gave me):
before 4.2.0.GA jboss always bound to the any address "0.0.0.0". You wouldn't believe how many people would put unprotected instances of JBoss on the internet, or even on their own local LAN. Now you have to explicitly choose to do that, so it takes some thinking about before you revert to the old default behaviour with the "-b' option of jboss.
am i to understand the following sequence of events is best practise?
1 - secure jboss (secure jmx-console, web-app console, remove invokers etc)
2 - add "-b 0.0.0.0" to your startup script so that jboss actually works
i guess im kinda confused because it says that using the -b option is the old way of doing it, and that i must still use -b, except i have to explicitly set it.
thanks again for the fast help -
3. Re: AS 4.2.1 - http://example.com:8080/ gives
dimitris Sep 21, 2007 5:49 AM (in response to konstandinos)For (2) you could bind to a specific NIC instead of all (0.0.0.)
-
4. Re: AS 4.2.1 - http://example.com:8080/ gives
jaikiran Sep 21, 2007 5:52 AM (in response to konstandinos)"konstandinos" wrote:
am i to understand the following sequence of events is best practise?
1 - secure jboss (secure jmx-console, web-app console, remove invokers etc)
2 - add "-b 0.0.0.0" to your startup script so that jboss actually works
i guess im kinda confused because it says that using the -b option is the old way of doing it, and that i must still use -b, except i have to explicitly set it.
thanks again for the fast help
Securing JBoss is the right thing to do. Once you have done that, instead of binding to 0.0.0.0, you can bind to specific IP. -
5. Re: AS 4.2.1 - http://example.com:8080/ gives
jaikiran Sep 21, 2007 6:01 AM (in response to konstandinos)Dimitris beat me to it :)