Re: - what protocol for an Internet postgres - Mailing list pgsql-general

From Network Administrator
Subject Re: - what protocol for an Internet postgres
Date
Msg-id 1053460984.3eca89f8d845f@webmail.vcsn.com
Whole thread Raw
In response to Re: - what protocol for an Internet postgres  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: - what protocol for an Internet postgres  ("Nigel J. Andrews" <nandrews@investsystems.co.uk>)
List pgsql-general
Sorry for being MIA gentlemen but I thought I would just pop a note in here- my
apologies if this has been answered already it has been 4 days :)

On the firewall thing- the only port I have open is 22.  The trick was to make
sure the sshd process was going allow X11 forwarding.

On the client side, whether it ssh or say PuTTY, you have to make sure you are
allowing X11 connections back to yourself.

For example the default ssh on the slackware run-time CD does not have this
feature enabled so if I'm at a clients site, I boot from this CD, mount my
floppy with my private key on it and type something like this (in an xterm
window after I bring up X-windows):

ssh -X -C -i /mnt/privkey someaccount@someserver.com

The "-C" compresses the datastream.  At this point, I can launch X apps and
they'll display on my screen.

I'll provide the exact options if needed...


I agree Tom, I don't quite understand why you are not seeing the traffic unless
it is denied.


Quoting Tom Lane <tgl@sss.pgh.pa.us>:

> "Nigel J. Andrews" <nandrews@investsystems.co.uk> writes:
> > I probably wasn't clear. The rule was a _permit_ from localhost to any
> remote
> > host/port for something that looked like a core Windows service. I never
> saw
> > the network traffic (with tcpdump of course) for the port forwarding until
> I
> > disabled that permit rule, thereby actually tightening the firewall.
>
> [ scratches head... ]  That makes no sense at all to me; does it to you?
>
>             regards, tom lane
>


--
Keith C. Perry
Director of Networks & Applications
VCSN, Inc.
http://vcsn.com

____________________________________
This email account is being host by:
VCSN, Inc : http://vcsn.com

pgsql-general by date:

Previous
From: Mark Wilson
Date:
Subject: Re: PRIMARY KEYS
Next
From: Jan Wieck
Date:
Subject: Re: INSERT/UPDATE/DELETE Views