We created a webservice (using jax-ws 2.1.x) which is running on an internal server in tomcat 6.0 container. This server is connected to an external server, which is connected again to the internet. On the external server there is running apache2 as a reverse proxy. All requests from internet go about a SSL-secured line. Apache2 proxy routes the requests to the tomcat container running the webservice. Now the proxy calls the webservice with the internal url which is not known in internet. So external users cannot retrieve the wsdl without further circumstances.