[GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread dfx
Dear Sirs, it is possible to connect to PostgreSQL server from a client with a dynamic IP (or from an unknown IP)? How I have to configure pg_hba.conf (and/or eventually my router, where the server is located)? I have no possibility to change the settings of clients (my customers) Thank you.

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread Steven De Vriendt
yes, it is possible if you use a service like dyndns: http://www.dyndns.com/ to convert your dynamic ip. If you use this service you connect your dynamic ip to a hostname, which is dynamically updated by this service. after that you can change your windows hosts file to add the hostname you have

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread Jorge Godoy
Em Monday 03 March 2008 07:01:17 dfx escreveu: it is possible to connect to PostgreSQL server from a client with a dynamic IP (or from an unknown IP)? How I have to configure pg_hba.conf (and/or eventually my router, where the server is located)? You'll have to make PostgreSQL accept

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread A. Kretschmer
am Mon, dem 03.03.2008, um 11:01:17 +0100 mailte dfx folgendes: Dear Sirs, it is possible to connect to PostgreSQL server from a client with a dynamic IP (or from an unknown IP)? Of course, yes. How I have to configure pg_hba.conf (and/or eventually my router, where the server is

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread dfx
I apologize for my confuse exposition. My server has a static, well known IP. The problem is that I don't know the IP of my customers (client side) and then I cannot insert those addresses in pg_hba.conf file. The question il: Is there a method to avoid to insert the addesses of the clients in

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread Magnus Hagander
On Mon, Mar 03, 2008 at 11:33:17AM +0100, A. Kretschmer wrote: am Mon, dem 03.03.2008, um 11:01:17 +0100 mailte dfx folgendes: Dear Sirs, it is possible to connect to PostgreSQL server from a client with a dynamic IP (or from an unknown IP)? Of course, yes. How I have to

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread A. Kretschmer
am Mon, dem 03.03.2008, um 11:59:36 +0100 mailte Magnus Hagander folgendes: How I have to configure pg_hba.conf (and/or eventually my router, where the server is located)? Set the CIDR to 0.0.0.0/32. That should be 0.0.0.0/0, I beleive. //Magnus Magnus, right. Thx. Andreas

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread Raymond O'Donnell
On 03/03/2008 11:01, dfx wrote: The question il: Is there a method to avoid to insert the addesses of the clients in the pg_hba.conf and to allow connections from internet with security assured only by username and password? Yes, that's what people have been explaining: you insert a line

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread Jorge Godoy
Em Monday 03 March 2008 08:08:36 Raymond O'Donnell escreveu: On 03/03/2008 11:01, dfx wrote: The question il: Is there a method to avoid to insert the addesses of the clients in the pg_hba.conf and to allow connections from internet with security assured only by username and password?

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread paul rivers
Jorge Godoy wrote: Em Monday 03 March 2008 08:08:36 Raymond O'Donnell escreveu: On 03/03/2008 11:01, dfx wrote: The question il: Is there a method to avoid to insert the addesses of the clients in the pg_hba.conf and to allow connections from internet with security assured only by

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread paul rivers
Collin wrote: But make it hostssl instead of host, to require some cryptography in the channel used, specially to authenticate the connection. Opening your access to everyone without crypto sounds like something you don't want to do. Specially if users can change their own passwords...

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread Collin
But make it hostssl instead of host, to require some cryptography in the channel used, specially to authenticate the connection. Opening your access to everyone without crypto sounds like something you don't want to do. Specially if users can change their own passwords... My

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread Andrei Kovalevski
Hello, Jorge Godoy wrote: Em Monday 03 March 2008 08:08:36 Raymond O'Donnell escreveu: On 03/03/2008 11:01, dfx wrote: The question il: Is there a method to avoid to insert the addesses of the clients in the pg_hba.conf and to allow connections from internet with security assured only

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread Tom Lane
Andrei Kovalevski [EMAIL PROTECTED] writes: Does anybody ever measured performance slowdown for SSL connections? It's pretty significant percentage-wise on a local-loopback connection, but for a connection over the open Internet I doubt it'd be an issue. Unless your data is completely not

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread Jorge Godoy
Em Monday 03 March 2008 13:17:03 vocĂȘ escreveu: My understanding is no password is sent in the clear with md5 per: http://www.postgresql.org/docs/8.3/interactive/auth-methods.html#AUTH-PASSW ORD But the MD5 hash is. This page states that the password can't be directly sniffed, but one can

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread brian
Jorge Godoy wrote: Em Monday 03 March 2008 13:17:03 vocĂȘ escreveu: My understanding is no password is sent in the clear with md5 per: http://www.postgresql.org/docs/8.3/interactive/auth-methods.html#AUTH-PASSW ORD But the MD5 hash is. This page states that the password can't be directly