How to disable posting updates from a remote server

[ashokc <as...@qualcomm.com>]

Hi,

I find that I am freely able to post to my production SOLR server, from any
other host that can run the post command. So somebody can wipe out the whole
index by posting a delete query. Is there a way SOLR can be configured so
that it will take updates ONLY from the server on which it is running?
Thanks - ashok
-- 
View this message in context: http://www.nabble.com/How-to-disable-posting-updates-from-a-remote-server-tp23876170p23876170.html
Sent from the Solr - User mailing list archive at Nabble.com.

Re: How to disable posting updates from a remote server

[Eric Pugh <ep...@opensourceconnections.com>]

Take a look at the security section in the wiki, u could do this with
firewall rules or password access.

On Thursday, June 4, 2009, ashokc <as...@qualcomm.com> wrote:
>
> Hi,
>
> I find that I am freely able to post to my production SOLR server, from any
> other host that can run the post command. So somebody can wipe out the whole
> index by posting a delete query. Is there a way SOLR can be configured so
> that it will take updates ONLY from the server on which it is running?
> Thanks - ashok
> --
> View this message in context: http://www.nabble.com/How-to-disable-posting-updates-from-a-remote-server-tp23876170p23876170.html
> Sent from the Solr - User mailing list archive at Nabble.com.
>
>

Re: How to disable posting updates from a remote server

[Michael Ludwig <ml...@as-guides.com>]

ashokc schrieb:
> I find that I am freely able to post to my production SOLR server,
> from any other host that can run the post command. So somebody can
> wipe out the whole index by posting a delete query.

Control this at the IP level, have your server listen on 127.0.0.1
or on a private subnet address.

Michael Ludwig