summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorBruce Momjian2009-10-03 23:10:47 +0000
committerBruce Momjian2009-10-03 23:10:47 +0000
commite99f626551fbc55ea3f3352485cf8126b6ba9204 (patch)
tree77c5a2d3b1010e21f3d75a796a16696ec8b5e179
parent9972f3abd79bcd976a2a31e033e471d2f08d8784 (diff)
Document the purpose of the GUC listen_addresses.
-rw-r--r--doc/src/sgml/config.sgml10
1 files changed, 8 insertions, 2 deletions
diff --git a/doc/src/sgml/config.sgml b/doc/src/sgml/config.sgml
index b834ae411c..a12a42b269 100644
--- a/doc/src/sgml/config.sgml
+++ b/doc/src/sgml/config.sgml
@@ -329,8 +329,14 @@ SET ENABLE_SEQSCAN TO OFF;
at all, in which case only Unix-domain sockets can be used to connect
to it.
The default value is <systemitem class="systemname">localhost</>,
- which allows only local <quote>loopback</> connections to be made.
- This parameter can only be set at server start.
+ which allows only local <quote>loopback</> connections to be
+ made. While client authentication (<xref
+ linkend="client-authentication">) allows fine-grained control
+ over who can access the server, <varname>listen_addresses</varname>
+ controls which interfaces accept connection attempts, which
+ can help prevent repeated malicious connection requests on
+ insecure network interfaces. This parameter can only be set
+ at server start.
</para>
</listitem>
</varlistentry>