users@glassfish.java.net

RE: localhost only glassfish

From: Open Indiana <openindiana_at_out-side.nl>
Date: Tue, 28 Aug 2012 21:01:11 +0200

You can bind glassfish to an IP-adress, so I guess 127.0.0.1 would work for
you.
But haven't tested it anyway.

You should disable telnet and JMX services in Glassfish.
Afak you can disable a lot via domain.xml within the conf. directory.

-----Original Message-----
From: Samuel Halliday [mailto:sam.halliday_at_gmail.com]
Sent: donderdag 16 augustus 2012 14:26
To: users_at_glassfish.java.net
Subject: localhost only glassfish

Dear all,

I was wondering if anybody has a set of asadmin commands which would
configure
an out-of-the-box glassfish to be entirely limited to ports on localhost ?
(i.e. 127.0.0.1)

I would also like to have full visibility of the ports which are open and
understand why they are needed. From my perspective, the only thing that
needs to be open is the HTTP serving port and the admin console. I want to
completely restrict other ports for security reasons, using embedded service
providers where
possible.

-- 
Sam