[GENERAL] postgres "on in the internet"

[Paul Tillotson]

At my company we are looking at deploying clients for our client/server 
app outside our firewall, which will then require our postgres box to be 
internet-accessible. 

Does anyone out there have experience with this or recommended best 
practices?  We have been looking at either (a) tunnelling everything 
over ssh, or (b) just making sure that users have "strong" passwords and 
requiring "md5" authentication in pg_hba.conf.

Our client app is in C# using the postgresql .net data provider.
Regards,
Paul Tillotson
---------------------------(end of broadcast)---------------------------
TIP 6: Have you searched our list archives?
              http://archives.postgresql.org