Bruce Momjian wrote:
>Tom Lane wrote:
>
>
>>"Magnus Hagander" <mha@sollentuna.net> writes:
>>
>>
>>>Are there any other platforms which don't have unix sockets?
>>>
>>>
>>There are a couple, although I think those ports may be moribund
>>(if anyone still cares about BeOS, they haven't mentioned it lately).
>>
>>
>>
>>>Perhaps we should force it to open a tcp socket on 127.0.0.1 only? That
>>>way we don't suddenly open up to external connections without the user
>>>asking for it.
>>>
>>>
>>That seems like a reasonable compromise.
>>
>>
>
>Agreed, but how do we do that. pg_hba.conf already only listens on
>127.0.0.1. Do we ignore non-local IPs in that file until they use -i?
>
>
>
Those are remote addresses, not local addresses. pg_hba.conf doesn't say
anything at all about the listening address. The errors that have been
reported would have passed the default pg_hba.conf filters - the problem
as I understand it was that there was no listener on the localhost
interface.
It is true, though,. that you can't (or shouldn't) be able to connect to
localhost except from localhost.
cheers
andrew
