Bugzilla – Bug 115288
postgres IP address binding
Last modified: 2005-09-05 12:18:18 UTC
No matter, what I set in /var/lib/pgsql/data/postgresql.conf, postmaster always binds to 0.0.0.0:5432 tcp 0 0 0.0.0.0:5432 0.0.0.0:* LISTEN 8237/postmaster
You must have added -i to POSTGRES_OPTIONS in /etc/sysconfig/postgresql , which according to the postmaster(1) manpage is deprecated and equivalent to setting listen_addresses to '*'. When -i is not used, the postmaster binds only to the IP addresses given in the listen_addresses parameter, and setting it empty (listen_addresses = '') disables TCP access completely.
Thanks, then README.SuSE for open-xchange is to be changed...
Well, the listen_addresses parameter got added in PG 8.0. Previous versions were either listening on all interfaces or not listening for TCP connections at all, so there is no regression in security or functionality if you keep doing things as the open-xchange README says. BTW, does open-xchange even officially support PostgreSQL 8.0 yet? If not, README.SuSE is still correct for the version(s) of PostgreSQL it was written for.
I suppose yes. At least editing /var/lib/pgsql/data/postgresql.conf and set 'localhost' there was mentioned in an OX wiki document. And all recent OX HOWTO-s mention 8.0.