Hi Team

Customer has a requirement for a SOAP web service on out UAT instance that is exposed to the internet to be restricted to specific IP only

App server Type : Tomcat 

Web Server : None 

OPEN SR : SR-A88837 and SR-A83796 

SETTINGS ATTEMPTED :

+++++++++++++++++++

The below settings were tried in web.xml but its not working 

though we give the full context, it is restrciting entire /prweb context. 

<filter> 
<filter-name>Remote Address Filter</filter-name> 
<filter-class>org.apache.catalina.filters.RemoteAddrFilter</filter-class> 
<init-param> 
<param-name>allow</param-name> 
<param-value>106\.51\.29\.148|a\.b\.c\.d</param-value> 
</init-param> 
</filter> 
<filter-mapping> 
<filter-name>Remote Address Filter</filter-name> 
<url-pattern>/prweb/PRSOAPServlet/SOAP/<proprietary information>/Services?WSDL</url-pattern> 
</filter-mapping> 


<filter> 
<filter-name>Remote Address Filter</filter-name> 
<filter-class>org.apache.catalina.filters.RemoteAddrFilter</filter-class> 
<init-param> 
<param-name>deny</param-name> 
<param-value>106\.51\.29\.148|103\.253.\104.\40</param-value> 
</init-param> 
</filter> 
<filter-mapping> 
<filter-name>Remote Address Filter</filter-name> 
<url-pattern>/prweb/PRSOAPServlet/SOAP/<proprietary information>/Services?WSDL</url-pattern> 
</filter-mapping> 

NOTE : - This was successfully implemented in prod and preprod as both env's has a loadbalancer 

***Updated by Moderator: Lochan. Removed user added Ask the Expert. Apologies for confusion, shouldn't have been an end-user option; Added SR Exists tag; Updated Categories set; removed proprietary information and URLs***

***Updated by Moderator: Added SR numbers to Related SR section***