users@glassfish.java.net

Re: localhost only glassfish

From: Samuel Halliday <sam.halliday_at_gmail.com>
Date: Tue, 28 Aug 2012 20:30:40 +0100

Thanks Indiana,

I have a vague idea of what needs to be done, but I was hoping somebody might already have a script to do it ;-)

-- 
Sam
On 28 Aug 2012, at 20:01, "Open Indiana" <openindiana_at_out-side.nl> wrote:
> You can bind glassfish to an IP-adress, so I guess 127.0.0.1 would work for
> you. 
> But haven't tested it anyway. 
> 
> You should disable telnet and JMX services in Glassfish. 
> Afak you can disable a lot via domain.xml within the conf. directory. 
> 
> -----Original Message-----
> From: Samuel Halliday [mailto:sam.halliday_at_gmail.com] 
> Sent: donderdag 16 augustus 2012 14:26
> To: users_at_glassfish.java.net
> Subject: localhost only glassfish
> 
> Dear all,
> 
> I was wondering if anybody has a set of asadmin commands which would
> configure
> an out-of-the-box glassfish to be entirely limited to ports on localhost ?
> (i.e. 127.0.0.1)
> 
> I would also like to have full visibility of the ports which are open and
> understand why they are needed. From my perspective, the only thing that
> needs to be open is the HTTP serving port and the admin console. I want to
> completely restrict other ports for security reasons, using embedded service
> providers where
> possible.
> 
> -- 
> Sam
> 
>