160

I've got a PostgreSQL data base that I'd like to configure to accept all incoming connections regardless of the source IP address. How can this be configured in the pg_hba.conf file? I'm using postgreSQL version 8.4.

0

6 Answers 6

327

Just use 0.0.0.0/0.

host    all             all             0.0.0.0/0            md5

Make sure the listen_addresses in postgresql.conf (or ALTER SYSTEM SET) allows incoming connections on all available IP interfaces.

listen_addresses = '*'

After the changes you have to reload the configuration. One way to do this is execute this SELECT as a superuser.

SELECT pg_reload_conf();

Note: to change listen_addresses, a reload is not enough, and you have to restart the server.

7
  • 6
    "trust" allows all users to connect without any password. That's something I wouldn't use, a password is the bare minimum you should always use. Even on your own computer. Jul 19, 2010 at 17:59
  • 1
    ah, i read the question differently -- i thought he meant accept connections from all clients unconditionally (for some unimportant testbed, maybe). i see what you're getting at now. Jul 19, 2010 at 19:00
  • 11
    NOTE: If your network is IPv6, you need to use ::/0 as opposed to 0.0.0.0/0 when modifying the pg_hba.conf file. May 11, 2015 at 16:02
  • 2
    Make sure postgres has strong password: sudo -u postgres psql, \password.
    – Adobe
    Jun 14, 2016 at 15:45
  • 1
    I will mention that if you are running your database locally only, as in the db can only be accessed from the local machine, running with no password is both hassle free and as secure as running with the most encrypted password you can come up with. If someone has gained access to the machine then they can just as easily make modifications to whatever they want to then grant themselves access to the db as well.
    – Mike
    Dec 19, 2017 at 20:18
73

0.0.0.0/0 for all IPv4 addresses

::0/0 for all IPv6 addresses

all to match any IP address

samehost to match any of the server's own IP addresses

samenet to match any address in any subnet that the server is directly connected to.

e.g.

host    all             all             0.0.0.0/0            md5
2
  • And md5 ??? I have an idea, but may wanna include it
    – blissweb
    Nov 15, 2021 at 6:31
  • 1
    It's great that you included an ipv6 example too, thanks! Nov 15, 2021 at 13:26
9

Addition to above great answers, if you want some range of IPs to be authorized, you could edit /var/lib/pgsql/{VERSION}/data file and put something like

host all all 172.0.0.0/8 trust

It will accept incoming connections from any host of the above range. Source: http://www.linuxtopia.org/online_books/database_guides/Practical_PostgreSQL_database/c15679_002.htm

0
8

Configuration all files with postgres 12 on centos:

step 1: search and edit file

sudo vi /var/lib/pgsql/12/data/pg_hba.conf

press "i" and at line IPv4 change

host    all             all             0.0.0.0/0            md5

step 2: search and edit file postgresql.conf

sudo vi /var/lib/pgsql/12/data/postgresql.conf

add last line: listen_addresses = '*' :wq! (save file)

step 3: restart

systemctl restart postgresql-12.service

3

Go to pg_hba.conf file in this location (/etc/postgresql/12/main) and add the following line at the end:

host  all  all 0.0.0.0/0 md5

It allows access to all databases for all users.

Restart Postgresql by writing this command

service postgresql restart

For further info, check out error details

-11

Add this line to pg_hba.conf of postgres folder

host    all    all    all    trust

"trust" allows all users to connect without any password.

3
  • Can you maybe add some commentary to the code? Where to put it and how it works?
    – Alistra
    Feb 14, 2017 at 9:41
  • 6
    Whilst this code snippet is welcome, and may provide some help, it would be greatly improved if it included an explanation of how and why this solves the problem. Remember that you are answering the question for readers in the future, not just the person asking now! Please edit your answer to add explanation, and give an indication of what limitations and assumptions apply. Feb 14, 2017 at 10:15
  • 1
    allow connections from all ips is really insecure
    – sandes
    Oct 22, 2018 at 1:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.