I have a legacy service that I'm porting to a new installation that allows users via http post to submit data to the server on port 8080. I need to support the exisitng URL http://mydomain.com:8080/java/submitData.jsp, but I don't want to risk exposing the vunerable jboss services that exist on that port. What should I do?
Currently, the firewall blocks all port 8080 requests I assume I'll have to open up 8080. There is an Apache webserver on port 80 that uses mod_jk to connect to Jboss, but images are directly served by Apache.
secure JBoss so those services are only available after verifying user credentials.