From d53ac74350e038be88162ea31aa57bd59f346a78 Mon Sep 17 00:00:00 2001
From: j2blake <j2blake@440791e1-c2bf-4c1e-ad7c-caf3f8b0ebe8>
Date: Mon, 11 Jul 2011 21:44:26 +0000
Subject: [PATCH] NIHVIVO-2812 Restrict access to Solr webapp, so it can only
 be accessed by a client on the same machine.

---
 solr/exampleSolrContext.xml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/solr/exampleSolrContext.xml b/solr/exampleSolrContext.xml
index 2ccdf112d..e479203b8 100644
--- a/solr/exampleSolrContext.xml
+++ b/solr/exampleSolrContext.xml
@@ -1,6 +1,12 @@
 <Context docBase="${solr.docbase}" 
     crossContext="true" override="true">
 
+   <!-- For security, restrict access to clients on this machine
+        for IPv4 requests, localhost is 127.0.0.1
+        for IPv6 requests, localhost is 0:0:0:0:0:0:0:1 -->
+    <Valve className="org.apache.catalina.valves.RemoteAddrValve" 
+        allow="127\.0\.0\.1,0:0:0:0:0:0:0:1"/>
+
    <Environment
         type="java.lang.String" 
         name="solr/home"