Re: Allowing client access

Dear Bob,
Thank you.?? hostssl works out of the box!?? It does not require extra 
configuration.?? I can connect to my own pgsql server via pgadmin 4.?? I 
personally feel that Postgresql v11 is much clever than Mysql v5.7 (I 
haven't tried its v8).

I also have tested postgres against TCP Wrappers but it is not compiled 
against TCP wrappers library.?? May I suggest the community to have 
postgres to work with TCP wrappers.?? Its security will be better.

Regards,
Timmy


> Hi Timmy
>
> You need to use CIDR form in your pg_hba.conf.  So:
>
> host all testuser  111.222.333.444/32  md5
>
> Most likely you would probably want to ensure ssl connection if coming
> over untrusted network.  So, at minimum, this is better:
>
> hostssl all testuser  111.222.333.444/32  md5
>
> This is better still:
>
> hostssl testdb testuser  111.222.333.444/32  md5
>
> Better still (IMHO) is to keep it local and use ssh tunnel, but I
> understand that might be difficult and not necessarily desirable,
> depending on the context.
>
> Regards
> Bob