Re: PostgreSQL Question

[Adam Tauno Williams <adam@xxxxxxxxxxxxxxxx>]

>Put a firewall between this host and the internet.  The three
>architectures  there are:
> 1. This host moves to a private IP address.  Only connections
> to the necessary ports are forwarded from the firewall to the host.

I don't know how PostgreSQL handles passing off connections to child processes
(on diffrent ports).  That might effect how well this works.  Anyone know?  If
not I'm willing to do a little tcpdump-ing ('cause it sound like a good thing to
know)

>2. The host moves to the DMZ, keeping its public IP.  Again,
>only connections to the necessary ports are forwarded.

Same as above.

>3. Drop a bridged firewall between the host and the internet. 
>The firewall is invisible to TCP/IP traffic, but can drop packets that flow
>through it.  Nifty, eh?

Fascinating.  I've seend the "bridge" option in "make menuconfig" but have never
used it.  Do both sides have to be the same network topology (ethernet) or is
this a diffrent type of bridging then you find in a router?  (Sounds like a
great presentation topic :)

Systems and Network Administrator
Morrison Industries
1825 Monroe Ave NW.
Grand Rapids, MI. 49505