Re: listen_addresses = '*' ok, specific address(es) no

Thank you Tom Lane and Phillip Smith, you've answered my questions.
--Geoff

On Jun 15, 2006, at 22:46, Tom Lane wrote:

> Geoffrey Knauth <geoff(at)knauth(dot)org> writes:
>> Andrew Sullivan wrote:
>>> Well, do you actually have an interface with that address?
>
>> I think I do, in that the machine's wireless interface is set up with
>> a 192.168.1.x/24 address and 1.33 is on the same subnet. Or maybe
>> I'm misunderstanding. I thought the purpose of listen_addresses was
>> to allowing incoming connections only from listed addresses.
>
> You're misunderstanding then. What listen_addresses can bind to is IP
> addresses of *your own machine*. For example, if you bind to only
> 127.0.0.1 then only local loopback connections will work. Binding to
> just one external IP address is only interesting if your machine has
> more than one such address; then it prevents connections that're
> coming
> in through one of the other addresses.
>
> The right way to limit incoming connections to only come *from*
> particular IP addresses is to use pg_hba.conf.
>
> regards, tom lane