how to protect startup and shutdown port in APACHE TOMCAT.

[KD]

Dear Experts,

Please help to protect shutdown as well as  Startup port in apache tomcat.

<Server port="8005" shutdown="SHUTDOWN" debug="0">

if an unauthorized user is connecting to the shutdown port and send the SHUTDOWN command, all applications within Tomcat will be halted. Any user with malicious intent can use this command to disable the Tomcat server.

how could i protect these ports and type of information from malicious users, to protect my tomcat server?

Rgds,

Kapil Dhamecha

[Kuldeep Sharma]

You can create a script and provide access to specific users who can run that command.

Thanks !!

Kuldeep