which class to change in tomcat

[Red Mike <re...@yahoo.com>]

Hello, there,
our company will sign contract with CyberSource
for a credit card transaction faaility.
My assignment is to set up a in house server,
which will
(1) receive credit card number and other
information.
(2) contact cybersource server for real time
credit card processing.
The problem is in (1). I am thinking to use Tomcat
to receive internal request. But I want to check
the sender IP, it should be inside our company.

This can be done in the JSP page. of course.
I am wondering if I can do it inside Tomcat.
As long as an HTTP request comes in, Tomcat
check sender IP, if it is not right. Tomcat will
close the connection.

Please advice me if this is dorable and if this is 
easy.

Any Java Gnu out there has already developed some
EJB using CyberSource API, I can have a look.
This will also be very helpful.

Thank you very very much!

mike

__________________________________________________
Do You Yahoo!?
Yahoo! Photos -- now, 100 FREE prints!
http://photos.yahoo.com

Re: which class to change in tomcat

["Craig R. McClanahan" <Cr...@eng.sun.com>]

Red Mike wrote:

> Hello, there,
> our company will sign contract with CyberSource
> for a credit card transaction faaility.
> My assignment is to set up a in house server,
> which will
> (1) receive credit card number and other
> information.
> (2) contact cybersource server for real time
> credit card processing.
> The problem is in (1). I am thinking to use Tomcat
> to receive internal request. But I want to check
> the sender IP, it should be inside our company.
>
> This can be done in the JSP page. of course.
> I am wondering if I can do it inside Tomcat.
> As long as an HTTP request comes in, Tomcat
> check sender IP, if it is not right. Tomcat will
> close the connection.
>
> Please advice me if this is dorable and if this is
> easy.
>

One approach to this would be to write a RequestInterceptor that did the
IP address filtering for you, which would reject requests from any other
IP.  That way, you would not need to modify anything about Tomcat itself
-- just write your new class, and add it to the configuration file.

>
> Any Java Gnu out there has already developed some
> EJB using CyberSource API, I can have a look.
> This will also be very helpful.
>
> Thank you very very much!
>
> mike
>

Craig McClanahan