Search code examples
postgresqlsecuritynetwork-programmingconnection

PostgreSQL Security Question Remote Connection

I was succesfull with connecting another computer with my local PostgreSQL Server(On Windows 10). I've added two specific lines of arguments in the respectful config files.

postgresql.conf:

listen_addresses = '*'

pg_hba.conf:

host all all all md5

I understood, that this connection is now possible in my local Network, where I am currently connected to. Is this really the case, or do I have to look out for some connections outside my network to block them? (ssl = off, hope that without ssl it is only local)

For completness, i also added a firewall rule where I allowed TCP connections for a port [Port] and profiles in a domain, private and public network.

Solution

  • You can limit the IP range adding a mask like, I'm not sure about that 3rd "all":

    host all all 192.168.0.1/24 md5

    In any case, you can check the log and see if pg up and listen (pg_log or -l parameter)