Check out the web.xml in the jboss deploy directory ..
In the web.xml, there would be a entry called listings for DefaultServlet. The default value for that is true which means display all the listings as in ur case. Turn that value to false and you would be able to avoid it from seeing by your clients.
Hi raja and thx for your quick answer,
I made as you said but it doesn't work : clients can access jboss admin page by typing : http://myipadress:8080/ ...
I think the entry "listings" is usufull when there s no welcome file but at the root, there is a welcom file (which display the link to access the amdin pages).
Have you any other idea?