Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1evzSe-0000f6-01 for pgsql-admin@arkaria.postgresql.org; Wed, 14 Mar 2018 06:00:28 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1evzSc-0005eE-73 for pgsql-admin@arkaria.postgresql.org; Wed, 14 Mar 2018 06:00:26 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1evzSb-0005dA-W8 for pgsql-admin@lists.postgresql.org; Wed, 14 Mar 2018 06:00:26 +0000 Received: from mx2.mailbox.org ([80.241.60.215]) by magus.postgresql.org with esmtps (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1evzSX-0001LC-IO for pgsql-admin@lists.postgresql.org; Wed, 14 Mar 2018 06:00:25 +0000 Received: from smtp1.mailbox.org (smtp1.mailbox.org [80.241.60.240]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx2.mailbox.org (Postfix) with ESMTPS id 9546341469; Wed, 14 Mar 2018 07:00:19 +0100 (CET) X-Virus-Scanned: amavisd-new at heinlein-support.de Received: from smtp1.mailbox.org ([80.241.60.240]) by spamfilter03.heinlein-hosting.de (spamfilter03.heinlein-hosting.de [80.241.56.117]) (amavisd-new, port 10030) with ESMTP id CaZtUoXf8Z-W; Wed, 14 Mar 2018 07:00:18 +0100 (CET) Message-ID: <1521007217.2368.6.camel@cybertec.at> Subject: Re: whitelist ip for postgres From: Laurenz Albe To: Azimuddin Mohammed , pgsql-admin@lists.postgresql.org Date: Wed, 14 Mar 2018 07:00:17 +0100 In-Reply-To: References: Organization: Cybertec Content-Type: text/plain; charset="UTF-8" Mime-Version: 1.0 Content-Transfer-Encoding: 7bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk Azimuddin Mohammed wrote: > How can I whitelist few ip's in postgres. I have create a VIP with SNAT. > The SNAT has 4 ips and no hostname and my VIP has a ip and a DNS name. If "whitelist" means "allow connections from", you should configure pg_hba.conf: https://www.postgresql.org/docs/current/static/auth-pg-hba-conf.html Yours, Laurenz Albe -- Cybertec | https://www.cybertec-postgresql.com