See Main Servlet on how to protect this servlet.
axis.servlet.hosts.allowed=127.0.0.1,SERVER_IP axis.servlet.https.required=false
