Hello Ioan,

I am not sure whether I correctly understood your issue. So you want to start Tomcat in a way that it serves only to localhost? This is an issue with Tomcat and I am sure there are ways to handle this. However, I don't really get what is has to do with the REST services provided by Basex?

Using the build-in jetty web server from BaseX it is usually enough to bind the port to 127.0.0.1 in the jetty.xml. I would expect Tomcat to have a similar mechanism.

Cheers Dirk

On 05/12/2016 07:58 PM, Ioan Fericel wrote:

Hi,

I seemed that this is the behavior if disabling REST Service in web.xml (BaseX.war deploymented on Tomcat), but this does not happen. The surprise is that the functions are accessible from anywhere, if access is not protected by other methods.

I'm doing wrong, what should be setting? I use BaseX 8.3.

Thanks for any guidance! Ioan