Re: - what protocol for an Internet postgres

From: Network Administrator <netadmin(at)vcsn(dot)com>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: "Nigel J(dot) Andrews" <nandrews(at)investsystems(dot)co(dot)uk>, pgsql-general(at)postgresql(dot)org
Subject: Re: - what protocol for an Internet postgres
Date: 2003-05-20 20:03:04
Message-ID: 1053460984.3eca89f8d845f@webmail.vcsn.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Sorry for being MIA gentlemen but I thought I would just pop a note in here- my
apologies if this has been answered already it has been 4 days :)

On the firewall thing- the only port I have open is 22. The trick was to make
sure the sshd process was going allow X11 forwarding.

On the client side, whether it ssh or say PuTTY, you have to make sure you are
allowing X11 connections back to yourself.

For example the default ssh on the slackware run-time CD does not have this
feature enabled so if I'm at a clients site, I boot from this CD, mount my
floppy with my private key on it and type something like this (in an xterm
window after I bring up X-windows):

ssh -X -C -i /mnt/privkey someaccount(at)someserver(dot)com

The "-C" compresses the datastream. At this point, I can launch X apps and
they'll display on my screen.

I'll provide the exact options if needed...

I agree Tom, I don't quite understand why you are not seeing the traffic unless
it is denied.

Quoting Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>:

> "Nigel J. Andrews" <nandrews(at)investsystems(dot)co(dot)uk> writes:
> > I probably wasn't clear. The rule was a _permit_ from localhost to any
> remote
> > host/port for something that looked like a core Windows service. I never
> saw
> > the network traffic (with tcpdump of course) for the port forwarding until
> I
> > disabled that permit rule, thereby actually tightening the firewall.
>
> [ scratches head... ] That makes no sense at all to me; does it to you?
>
> regards, tom lane
>

--
Keith C. Perry
Director of Networks & Applications
VCSN, Inc.
http://vcsn.com

____________________________________
This email account is being host by:
VCSN, Inc : http://vcsn.com

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Network Administrator 2003-05-20 20:05:48 Re: - what protocol for an Internet postgres
Previous Message Jan Wieck 2003-05-20 20:02:53 Re: INSERT/UPDATE/DELETE Views