Re: Allowing client access

Dear Bob,
Thank you.?? hostssl works out of the box!?? It does not require extra
configuration.?? I can connect to my own pgsql server via pgadmin 4.?? I
personally feel that Postgresql v11 is much clever than Mysql v5.7 (I
haven't tried its v8).

I also have tested postgres against TCP Wrappers but it is not compiled
against TCP wrappers library.?? May I suggest the community to have
postgres to work with TCP wrappers.?? Its security will be better.

Regards,
Timmy

> Hi Timmy
>
> You need to use CIDR form in your pg_hba.conf. So:
>
> host all testuser 111.222.333.444/32 md5
>
> Most likely you would probably want to ensure ssl connection if coming
> over untrusted network. So, at minimum, this is better:
>
> hostssl all testuser 111.222.333.444/32 md5
>
> This is better still:
>
> hostssl testdb testuser 111.222.333.444/32 md5
>
> Better still (IMHO) is to keep it local and use ssh tunnel, but I
> understand that might be difficult and not necessarily desirable,
> depending on the context.
>
> Regards
> Bob