Mime-Version: 1.0 (Apple Message framework v750)
In-Reply-To: <12217.1150426008@sss.pgh.pa.us>
References: <7F9DD4F9-A334-4A52-8501-1DA780CD4D2E@knauth.org>
	<27882.1150382418@sss.pgh.pa.us>
	<49DF5CA8-5E4D-415E-9A9A-DA412B213DE0@knauth.org>
	<12217.1150426008@sss.pgh.pa.us>
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <BBE3FF08-AFAB-4FFC-8F27-279CDA85377D@knauth.org>
Content-Transfer-Encoding: 7bit
From: Geoffrey Knauth <geoff@knauth.org>
Subject: Re: listen_addresses = '*' ok, specific address(es) no 
Date: Fri, 16 Jun 2006 10:39:46 -0400
To: pgsql-sql@postgresql.org

Thank you Tom Lane and Phillip Smith, you've answered my questions.   
--Geoff

On Jun 15, 2006, at 22:46, Tom Lane wrote:

> Geoffrey Knauth <geoff@knauth.org> writes:
>> Andrew Sullivan wrote:
>>> Well, do you actually have an interface with that address?
>
>> I think I do, in that the machine's wireless interface is set up with
>> a 192.168.1.x/24 address and 1.33 is on the same subnet.  Or maybe
>> I'm misunderstanding.  I thought the purpose of listen_addresses was
>> to allowing incoming connections only from listed addresses.
>
> You're misunderstanding then.  What listen_addresses can bind to is IP
> addresses of *your own machine*.  For example, if you bind to only
> 127.0.0.1 then only local loopback connections will work.  Binding to
> just one external IP address is only interesting if your machine has
> more than one such address; then it prevents connections that're  
> coming
> in through one of the other addresses.
>
> The right way to limit incoming connections to only come *from*
> particular IP addresses is to use pg_hba.conf.
>
> 			regards, tom lane