Re: PostgreSQL Question

["Richard Zimmerman" <Richard@xxxxxxxxxxxx>]

> You make a good case for packet filtering on that interface.  Given your
> concern about that interface being portscanned, I assume that machine is
> not behind a firewall.  So, create some defense in depth:
> Block external access to port 5432, as you did, using the postgresql
configs.
> Block external access to port 5432 with ip-chains or netfilter (depending
> on which kernel you're using).

   Actually, I've done exactly that...

  I have setup input & output rules on eth1 (external network card) to block
port 5432... I'd rather have the port "hidden" so it's never seen on an
outside scan to begin with....

   OK, so I'm being picky! <G>

   Good suggestions though!!!

   I've got an email drafted and I'll find the proper address to send it to
in the morning....

   Goose