Well...if it's truly a client/server app, why not have the client app
talk to the server who actually executes the SQL. That way no remote
access to the database is required.
IMHO, it's a 'bad thing' to have your database exposed to the internet....
Jeff Amiel
Paul Tillotson wrote:
> At my company we are looking at deploying clients for our
> client/server app outside our firewall, which will then require our
> postgres box to be internet-accessible.
> Does anyone out there have experience with this or recommended best
> practices? We have been looking at either (a) tunnelling everything
> over ssh, or (b) just making sure that users have "strong" passwords
> and requiring "md5" authentication in pg_hba.conf.
>
