Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread brian
Jorge Godoy wrote: Em Monday 03 March 2008 13:17:03 vocĂȘ escreveu: My understanding is no password is sent in the clear with md5 per: http://www.postgresql.org/docs/8.3/interactive/auth-methods.html#AUTH-PASSW ORD But the MD5 hash is. This page states that the password can't be directly sni

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread Jorge Godoy
Em Monday 03 March 2008 13:17:03 vocĂȘ escreveu: > > My understanding is no password is sent in the clear with md5 per: > > http://www.postgresql.org/docs/8.3/interactive/auth-methods.html#AUTH-PASSW >ORD But the MD5 hash is. This page states that the password can't be directly sniffed, but one c

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread Tom Lane
Andrei Kovalevski <[EMAIL PROTECTED]> writes: > Does anybody ever measured performance slowdown for SSL connections? It's pretty significant percentage-wise on a local-loopback connection, but for a connection over the open Internet I doubt it'd be an issue. Unless your data is completely not pri

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread Andrei Kovalevski
Hello, Jorge Godoy wrote: Em Monday 03 March 2008 08:08:36 Raymond O'Donnell escreveu: On 03/03/2008 11:01, dfx wrote: The question il: Is there a method to avoid to insert the addesses of the clients in the pg_hba.conf and to allow connections from internet with security assured only

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread Collin
But make it "hostssl" instead of "host", to require some cryptography in the channel used, specially to authenticate the connection. Opening your access to everyone without crypto sounds like something you don't want to do. Specially if users can change their own passwords... My underst

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread paul rivers
Collin wrote: But make it "hostssl" instead of "host", to require some cryptography in the channel used, specially to authenticate the connection. Opening your access to everyone without crypto sounds like something you don't want to do. Specially if users can change their own passwords

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread paul rivers
Jorge Godoy wrote: Em Monday 03 March 2008 08:08:36 Raymond O'Donnell escreveu: On 03/03/2008 11:01, dfx wrote: The question il: Is there a method to avoid to insert the addesses of the clients in the pg_hba.conf and to allow connections from internet with security assured only by usern

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread Jorge Godoy
Em Monday 03 March 2008 08:08:36 Raymond O'Donnell escreveu: > On 03/03/2008 11:01, dfx wrote: > > The question il: Is there a method to avoid to insert the addesses of > > the clients in the pg_hba.conf and to allow connections from internet > > with security assured only by username and password?

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread Raymond O'Donnell
On 03/03/2008 11:01, dfx wrote: The question il: Is there a method to avoid to insert the addesses of the clients in the pg_hba.conf and to allow connections from internet with security assured only by username and password? Yes, that's what people have been explaining: you insert a line somet

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread A. Kretschmer
am Mon, dem 03.03.2008, um 11:59:36 +0100 mailte Magnus Hagander folgendes: > > > How I have to configure pg_hba.conf (and/or eventually my router, where > > > the > > > server is located)? > > > > Set the CIDR to 0.0.0.0/32. > > That should be 0.0.0.0/0, I beleive. > > //Magnus Magnus, right

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread Magnus Hagander
On Mon, Mar 03, 2008 at 11:33:17AM +0100, A. Kretschmer wrote: > am Mon, dem 03.03.2008, um 11:01:17 +0100 mailte dfx folgendes: > > Dear Sirs, > > > > it is possible to connect to PostgreSQL server from a client with a dynamic > > IP (or from an unknown IP)? > > Of course, yes. > > > > > > H

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread dfx
I apologize for my confuse exposition. My server has a static, well known IP. The problem is that I don't know the IP of my customers (client side) and then I cannot insert those addresses in pg_hba.conf file. The question il: Is there a method to avoid to insert the addesses of the clients in t

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread A. Kretschmer
am Mon, dem 03.03.2008, um 11:01:17 +0100 mailte dfx folgendes: > Dear Sirs, > > it is possible to connect to PostgreSQL server from a client with a dynamic > IP (or from an unknown IP)? Of course, yes. > > How I have to configure pg_hba.conf (and/or eventually my router, where the > server i

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread Jorge Godoy
Em Monday 03 March 2008 07:01:17 dfx escreveu: > it is possible to connect to PostgreSQL server from a client with a dynamic > IP (or from an unknown IP)? > > How I have to configure pg_hba.conf (and/or eventually my router, where the > server is located)? You'll have to make PostgreSQL accept co

Re: [GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread Steven De Vriendt
yes, it is possible if you use a service like dyndns: http://www.dyndns.com/ to "convert" your dynamic ip. If you use this service you connect your dynamic ip to a hostname, which is dynamically updated by this service. after that you can change your windows hosts file to add the hostname you have

[GENERAL] Connect to postgres from a dynamic IP

2008-03-03 Thread dfx
Dear Sirs, it is possible to connect to PostgreSQL server from a client with a dynamic IP (or from an unknown IP)? How I have to configure pg_hba.conf (and/or eventually my router, where the server is located)? I have no possibility to change the settings of clients (my customers) Thank you. D