Re: Need help in enabling remote connection

On Tue, Nov 3, 2009 at 1:53 AM, Shruthi A <shruthi(dot)iisc(at)gmail(dot)com> wrote:
> Hi all,
>
> Thanks a lot for all your replies.  The problem is solved now.  This is the
> correct thing to do:    listen_addresses = '*'
> And then restart the service.
>
> Additional notes:
> -- Remember to use single quotes around the * else it will give syntax
> error.
> -- The listen_addresses parameter specifies the client addresses, and not
> the server.

No, the listen_address specifies which SERVER ip address to listen on.
* means to listen on all interfaces. You can pick individual
interfaces to listen on on the server by changing * to one of a
server's IP addresses.

> -- Once this service is started, telneting the server on the given port
> successfully connects.
> -- Dear Ian Lea, i guess 10.0.0.1/24  is the same as 10.0.0.0/24  as the
> mask '24' means that the first 3 octets (24 bits from the left hand side)
> must match ie both mean simply 10.0.0.*

Actually 10.0.0.0/24 means that the right hand 24 bits don't matter,
so anything starting with 10. will match.

> -- And i think 'trust' should be fine assuming that this will be used on an
> isolated network with a few trusted machines or a secure network where a
> firewall protects a given set of ports.

Exactly. Most databases used by an application are firewalled off in
such a way that having strict passworded access just moves the place
your vulnerable to db hacking from the db to the app.

> -- Dear Brian Modra, i guess   listen_addresses = 'localhost,10.0.0.123'
> will give error. It should be written as   listen_addresses =
> 'localhost','10.0.0.123'  that is each IP should be quoted separately.

Yep. same is true for things like search_path.

Glad you're up and running. Hope you're having fun with your db.