IP Restrictions

 
This is done by using a "Valve". Generally, you want to put in in the application's xml. You can find this in our setup at

E:/Program Files/Apache Software Foundation/Tomcat 5.5/conf/Catalina/localhost

And it will look something like this

<Valve 	
    className="org.apache.catalina.valves.RemoteAddrValve" 
    allow="132.235.*.*"/>

Here is some more info from the web

...you can put a Valve inside an Engine, Host, or Context. It applies at whatever scope you put it. So if you have a Valve inside a Context, it only applies to that context. If you have a Valve inside a Host, it applies to all Contexts within the Host, including those automatically created and not explicitly declared.

As Valve is a tomcat-specific feature, it would never be in web.xml. It'd be in server.xml or your context configuration file.

Here is an example from our server

<Engine
    ..
    ..
    <Host
        ..
        ..
        <Context path="/wiki">
            <Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="132.235.*.*"/>
        </Context>

List multiple IPs by comma sperating them. It's rumored that RegEx works too

>>http://tomcat.apache.org/tomcat-5.5-doc/config/valve.html

Comments