Hi, Tom Lane <t...@sss.pgh.pa.us> writes: > Peter Eisentraut <pete...@gmx.net> writes: >> On Wed, 2009-09-30 at 22:08 -0400, Tom Lane wrote: >>> (Note that you would still need a non-default setting of >>> listen_addresses for "-h machine_name" to actually work.) > >> Which makes this proposal kind of uninteresting.
As already said, it's one less step to have it working. This hba file is hard to get at for a lot of newbies we see on IRC. +1 for default configuration using samehost. > Although come to think of it ... is there any reason besides sheer > conservatism to not make the default listen_addresses value '*'? > It won't result in letting in any outside connections unless you > also add pg_hba.conf entries. Everywhere possible I have listen_addresses set to '127.0.0.1' a pgbouncer instance for clients to connect to, on the non loopback interface. That allows me to be sure that developers won't accidently bypass pgbouncer. But as we're only talking about default setup, Magnus argument weights much more (no DOS or portscan). Regards, -- dim -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers
