I am currently running Tomcat 7 on a Windows Server 2008 machine. I have GeoServer 4.2.1 installed as a war. What I need to do is restrict access to GeoServer Manager only to Localhost. As it currently stands you can access the Manager anywhere by going to


I would like to only give access to Geoserver Manager by means of

I have updated by context.xml file to limit access to Tomcat Manager via localhost with this:

<Valve className="org.apache.catalina.valves.RemoteAddrValve"allow="" deny=""/>

Would I do something similar? Any help is greatly appreciated.

  • I have accepted your answer as correct, but I must amend my question - I need to limit access to GeoServer Manager to Localhost, which adding the context.xml file does, but I still need anonymous WFS requests allowed. Setting up this context.xml file returns expected 403 errors. – js1983 May 20 '14 at 15:43

Yes, you can use exactly the same mechanism to limit access to any web application. If the web application doesn't have a context.xml file you can simply create an empty one and add what you need.

  • 1
    You could combine this with firewall rules on the host, depending on your specific security needs and what else is running that you do need to provide access to. – BradHards May 19 '14 at 23:06

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.