Right! Thanks a lot! I didn't look at z2.py for a while ... That's already #1 disabled. I hope there's a solution for XML-RPC, too. Ragnar
You're sort of right ;)
At least for WebDAV you can change the 'source port' separately, can't you ? '-W -' would disable it.
More docs in z2.py.
xmlrpc is the hard one to crack, but since to do anything in a major you should require authentication it shouldn't be too much of a problem.
Phil
----- Original Message ----- From: "Ragnar Beer" <rbeer@uni-goettingen.de> To: <zope@zope.org> Sent: Monday, March 05, 2001 3:09 PM Subject: Re: [Zope] disable WebDAV and XML-RPC?
That won't work, because WebDAV and XML-RPC don't have ports of their own but use the http protocoll :(
Ragnar
Couldn't you use the -X option to z2.py?
It supposedly turns off all Zope 'ports' and then use -w/-f to turn on the web and ftp 'ports'.
Phil
----- Original Message ----- From: "Ragnar Beer" <rbeer@uni-goettingen.de> To: <zope@zope.org> Sent: Monday, March 05, 2001 1:56 PM Subject: [Zope] disable WebDAV and XML-RPC?
Howdy!
Following the "deny everything that isn't explicitly allowed" policy I'd like to disable WebDAV and XML-RPC access to Zope. Is ist possible to disable them in Zope or do I have to catch the requests before they reach Zope?
Ragnar
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )