Re: enabling tcpip_socket by default

From: Bruno Wolff III <bruno(at)wolff(dot)to>
To: Andrew Dunstan <andrew(at)dunslane(dot)net>
Cc: pgsql-hackers(at)postgresql(dot)org
Subject: Re: enabling tcpip_socket by default
Date: 2004-05-18 02:33:00
Message-ID: 20040518023300.GA27950@wolff.to
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Mon, May 17, 2004 at 18:00:48 -0400,
Andrew Dunstan <andrew(at)dunslane(dot)net> wrote:
>
> But what we listen to relates to the destination address of the packets,
> not the source address ...

There still is some small risk. If you OS doesn't reject packets destined
for 127.*.*.* that don't come from the loopback interface, it is possible
for someone on your local network to at least do a blind spoofing attack,
possibly they might also be able to get replies back as well.

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Bruno Wolff III 2004-05-18 02:38:31 Re: Call for 7.5 feature completion
Previous Message Bruce Momjian 2004-05-18 02:30:11 Re: Call for 7.5 feature completion