Controlling access to hosts specified in a URL
By default, we can specify any host name in a URL used to retrieve content. However, we can restrict access to a specified list of host names by modifying the configuration of the WCM WCMConfigService service.
- Log in to the WebSphere Integrated Solutions Console.
- Click Resources > Resource Environment > Resource Environment Providers > WCM WCMConfigService > Custom properties.
Cluster note: If we are using this web content server as part of a cluster, ensure that we use the WebSphere Integrated Solutions Console for the deployment manager when manipulating configuration properties.
- Update the configuration to block access from unknown hosts. Specify the following property:
- Property name: connect.connector.httpconnector.denyunknownhosts
- Value: true
- For each host name for which to grant access, add a new property. Use the following format for new properties:
- Property name: connect.connector.httpconnector.hosts.host, where host is the fully qualified host name of the server for which to permit access. For example: connect.connector.httpconnector.hosts.www.example.com
- Value: true or false
- Optional: Specify a default cache expiration value for the host name we added by adding a new property. Use the following format for new properties:
- Property name: connect.connector.httpconnector.hosts.host.defaultcacheexpires, where host is the fully qualified host name of the server for which to permit access. For example: connect.connector.httpconnector.hosts.www.example.com.defaultcacheexpires
- Value: expiration_time. For example: REL 9000s
- Optional: Specify a default cache setting for the host name we added by adding a new property. Use the following format for new properties:
- Property name: connect.connector.httpconnector.hosts.host.defaultcache, where host is the fully qualified host name of the server for which to permit access. For example: connect.connector.httpconnector.hosts.www.example.com.defaultcacheexpires
- Value: true or false
Parent: Additional configuration optionsRelated:
Related: