Adobe 38043740 Lockdown Guide - Page 55

Tomcat Shutdown Port, connectionTimeout=20000, redirectPort=8445 /&gt

Get Adobe 38043740 - ColdFusion Standard - Mac PDF manuals and user guides
UPC - 883919135168
View all Adobe 38043740 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 55 highlights

connectionTimeout="20000" redirectPort="8445" /> This must be repeated for each ColdFusion instance created. 4.3.3 Apply any ColdFusion additional Security Patches Visit: http://www.adobe.com/support/security/ and read all pertinent ColdFusion Security Bulletins. Download and install any relevant security hotfixes not already installed. 4.3.4 Tomcat Shutdown Port Tomcat listens on a TCP port (8007 by default, may differ if multiple instances) for a SHUTDOWN command. When the command is received on the specified port the server will shutdown. Edit the file {cf.instance.home}/runtime/conf/server.xml and locate the line similar to: Change 8007 to -1 to disable this feature, or to random port number. Tomcat should only listen on 127.0.0.1 for this port, however you should also ensure that your firewall does not allow external connections to this port. Also consider changing the shutdown command, that is the value of the shutdown attribute of the Server tag. This string is essentially a password used to shut down the server locally when the port is enabled. Next look in: {cf.instance.home}/bin/port.properties and edit the following line to match server.xml port value: SHUTDOWN=8007 Ensure that global read permission is denied for both these files. 55

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
55
connectionTimeout="20000"
redirectPort="8445" />
This must be repeated for each ColdFusion instance created.
4.3.3 Apply any ColdFusion additional Security Patches
Visit:
and read all pertinent ColdFusion Security Bulletins. Download
and install any relevant security hotfixes not already installed.
4.3.4 Tomcat Shutdown Port
Tomcat listens on a TCP port (8007 by default, may differ if multiple instances) for a SHUTDOWN command.
When the command is received on the specified port the server will shutdown.
Edit the file
{cf.instance.home}/runtime/conf/server.xml
and locate the line similar to:
<Server port="8007" shutdown="SHUTDOWN">
Change
8007
to -1 to disable this feature, or to random port number. Tomcat should only listen on 127.0.0.1
for this port, however you should also ensure that your firewall does not allow external connections to this port.
Also consider changing the shutdown command, that is the value of the
shutdown
attribute of the
Server
tag. This string is essentially a password used to shut down the server locally when the port is enabled.
Next look in:
{cf.instance.home}/bin/port.properties
and edit the following line to match
server.xml
port value:
SHUTDOWN=8007
Ensure that global read permission is denied for both these files.