>>[pg_hba.conf]
>>...
>># TYPE DATABASE USER CIDR-ADDRESS METHOD
>>
>># "local" is for Unix domain socket connections only
>>local all all trust
>># IPv4 local connections:
>>local all postgres trust
>>host all postgres 127.0.0.1 255.255.255.255 trust
>>host all all 0.0.0.0/0 trust
>># IPv6 local connections:
>>#host all all ::1/128 trust
>>
>>
>
>
>Your pg_hba.conf is missing a line that corresponds to the interface to the world
>of the network card.
>
>You should add a line for the subnet your computer is connected to, for example:
>
>host all all 172.17.1.87 255.255.248.0 md5
>
>This is for the connection from all computers in my subnet with md5 password-authentication.
>If you do not use localhost as hostname in the connection string, this is needed even
>for local connections.
>
>
scary, however, is...
host all all 0.0.0.0/0 trust
I read that to say, trust anyone from any IP to be anyone they say they want to be.
wouldn't that trump your subnet md5 line ?