postgres.conf ip_add='*'

[JanCZ]

Hello

I would like to be bit more specific about setting postgres.conf ip_add='*', not to allow all but what is really needed - i assume localhost and zabbix server IP addres. When i try

postgres.conf ip_add='localhost','zabbix.server.IP.addres'

its not working, also 'localhost, zabbix.server.IP.addres'

as well not, iam just curious if i misunderstand it, tried to do some basic hardening, not to simply '*' allow all which works perfectly fine.

[volter]

First, this is actually not related to Zabbix, but solely PG.

Not having a listening socket on an interface is a valid which. However pg_hba.conf is often enough to secure basic access. What do you expect from binding to that other interface? Where are frontend and server?

If that's even what you want, the directive is called listen_address, not ip_addr.

https://www.postgresql.org/docs/9.6/static/runtime-config-connection.html

I'm pretty sure you want pg_hba.conf.

https://www.postgresql.org/docs/9.6/static/auth-pg-hba-conf.html

[JanCZ]

Thanks for reply
Everything is on one machine i was just curious if i can config it more specifically instead of only localhost or * allow all option simply because allow all seems bit overkill. Its more of curiosity question for better understanding.