"Joshua D. Drake" <jd@commandprompt.com> writes:
> Rodrigo Sakai wrote:
>> I have a question about changing the port number of Databases
>> server. It was told to me that is a good administrative practice to
>> change the port number of the services, like change the 5432 to 6985
>> or any other number. This is for security reasons. Is really a good
>> practice?
> Well, not really. Anyone who wants to get in, is just going to scan your
> ports to find out what is open anyway. What you really need to do
> is have a decent firewall in place and correctly configure postgresql
> from the beginning.
It's just "security by obscurity". Now there's nothing wrong with that,
as long as you realize that it's only one obstacle in the path of an
attacker, and not a very large one. Use it as one component of your
security plan, but not the only one.
regards, tom lane
