I want to configure PostgreSQL to accept connections only from a specified IP. It should not accept requests from any other IP.
3 Answers
The following pg_hba.conf allows local and specified Ip have privilege login, but reject others。
# TYPE DATABASE USER ADDRESS METHOD
local all all trust
host testdb testuser 192.168.1.1/32 md5
host all all 0.0.0.0/0 reject
The easiest way is to make PostgreSQL listen only on localhost
for incoming connections. The relevant parameter is listen_addresses
in postgresql.conf
. The doc is here.
Check the pg_hba.conf file in the data folder of PostgreSQL. This is the client authentication configuration file.
# TYPE DATABASE USER ADDRESS METHOD
host testdb testuser 192.168.1.1 md5
local testdb all md5
Add the above to the pg_hba.conf file
-
4Note that PostgreSQL will still accept TCP socket connections to its port from any interface it is bound to via
listen_addresses
inpostgresql.conf
, it just won't let them authenticate. If you want to prevent even a TCP handshake, you'll need to useiptables
. Aug 1, 2012 at 6:59