Impossible to bind to a specific IP address

Graham Leggett <minfrin@sharp.fm> writes:

As far as I can tell from the documentaion, it is impossible to tell the
postmaster daemon to bind to just a single IP address

Sure you can, assuming you're running a current release. See
VIRTUAL_HOST config parameter or equivalent -h commandline switch.

regards, tom lane

Hi,

As far as I can tell from the documentaion, it is impossible to tell the
postmaster daemon to bind to just a single IP address - only to a
specific port on all IP addresses. This makes hardening the box
postgresql is running on impossible.

Is there a workaround to this? (other than trying to firewall off the
ports - the box needs to be protected from other boxes nearby - it is in
an insecure environment).

In 7.1.X you can bind to a specific IP. See postmaster -h flag. Not
sure about 7.0.X releases.

-- 
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman@candle.pha.pa.us               |  (610) 853-3000
  +  If your life is a hard drive,     |  830 Blythe Avenue
  +  Christ can be your backup.        |  Drexel Hill, Pennsylvania 19026