Tomcat listens on port 8081 (HTTP), 8007 (ajp12), and 8009 (ajp13). You will probably want to firewall off 8007 and 8009 from remote hosts and disable Tomcat's HTTP server (see Section ).