IP range in pg_hba.conf?
Hi,
properbly a simple question (with a simple answer). Nevertheless I´ve been
struggeling with it for some time now. Hope you guys can point me in the
right direction!
I want to exclude access to our postgresql db using a configuration in the
pg_hba.conf file. I have a range of IP adress that should have access, but
how do I do that?
The range is 10.17.64.1 - 10.17.79.254 (eg. 255.255.240.0 as subnet).
Best regards,
Christian
--
View this message in context: http://postgresql.1045698.n5.nabble.com/IP-range-in-pg-hba-conf-tp4973998p4973998.html
Sent from the PostgreSQL - general mailing list archive at Nabble.com.
2011-11-08 12:33 keltezéssel, Chrishelring írta:
Hi,
properbly a simple question (with a simple answer). Nevertheless I´ve been
struggeling with it for some time now. Hope you guys can point me in the
right direction!I want to exclude access to our postgresql db using a configuration in the
pg_hba.conf file. I have a range of IP adress that should have access, but
how do I do that?The range is 10.17.64.1 - 10.17.79.254 (eg. 255.255.240.0 as subnet).
host all all 10.17.64.0/20 md5
Best regards,
Christian
--
View this message in context: http://postgresql.1045698.n5.nabble.com/IP-range-in-pg-hba-conf-tp4973998p4973998.html
Sent from the PostgreSQL - general mailing list archive at Nabble.com.
--
----------------------------------
Zoltán Böszörményi
Cybertec Schönig & Schönig GmbH
Gröhrmühlgasse 26
A-2700 Wiener Neustadt, Austria
Web: http://www.postgresql-support.de
http://www.postgresql.at/
Hi,
On 8 November 2011 22:33, Chrishelring <christianhelring@gmail.com> wrote:
I want to exclude access to our postgresql db using a configuration in the
pg_hba.conf file. I have a range of IP adress that should have access, but
how do I do that?The range is 10.17.64.1 - 10.17.79.254 (eg. 255.255.240.0 as subnet).
The range above should be written like this: 10.17.64.0/20
--
Ondrej Ivanic
(ondrej.ivanic@gmail.com)
Can you guys explain why it is 10.17.64.0/20? Thanks!
Sent from iPad
在 Nov 8, 2011，7:42 PM，Ondrej Ivanič <ondrej.ivanic@gmail.com> 写道：
Show quoted text
Hi,
On 8 November 2011 22:33, Chrishelring <christianhelring@gmail.com> wrote:
I want to exclude access to our postgresql db using a configuration in the
pg_hba.conf file. I have a range of IP adress that should have access, but
how do I do that?The range is 10.17.64.1 - 10.17.79.254 (eg. 255.255.240.0 as subnet).
The range above should be written like this: 10.17.64.0/20
--
Ondrej Ivanic
(ondrej.ivanic@gmail.com)--
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general
2011/11/8 Zhidong <zhidong.she@gmail.com>:
Can you guys explain why it is 10.17.64.0/20? Thanks!
11111111 = 255 in binary
11110000 = 240 in binary
So a CIDR mask of 8 would cover the first 8 bits, 16 the next 8, but
when we reach 20 we've covered 20 bits.
The first 255 is the first 8 bits. The next 255 is bits 9-16. Bits
17-20 brings it up to 240. The rest are zeros.
0.0.0.0 = /0
255.0.0.0 = /8
255.255.0.0 = /16
255.255.255.0 = /24
255.255.255.255 = /32
And inbetween you get:
255.255.240.0 = /20
255 255 240 0
11111111 11111111 11110000 00000000
First 20 binary digits are masked.
--
Thom Brown
Twitter: @darkixion
IRC (freenode): dark_ixion
Registered Linux user: #516935
EnterpriseDB UK: http://www.enterprisedb.com
The Enterprise PostgreSQL Company