> Hi,
>
> As far as I can tell from the documentaion, it is impossible to tell the
> postmaster daemon to bind to just a single IP address - only to a
> specific port on all IP addresses. This makes hardening the box
> postgresql is running on impossible.
>
> Is there a workaround to this? (other than trying to firewall off the
> ports - the box needs to be protected from other boxes nearby - it is in
> an insecure environment).
In 7.1.X you can bind to a specific IP. See postmaster -h flag. Not
sure about 7.0.X releases.
--
Bruce Momjian | http://candle.pha.pa.us
pgman@candle.pha.pa.us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026
