Stephen McConnell schrieb:
Dave
"Functions like gethostbyname() are written by Microsoft, not us. If
they
don't return, there's not much we can do. I suppose we could run every
system call in a different thread so we can abort if it doesn't return,
but that would bring a whole new meaning to the term 'bloatware' and
would probably mean we would still be writing the connect code."
While you probably don't need to write a new thread for each and every
system call, PROFESSIONAL PROGRAMMING DISCIPLINE determines which
system calls could possibly hang a program and performs the appropriate
exception handling. Any other development process that writes a widely
distributed application to be used on a particular platform (Open
source or not) is hubris (very much like Microsoft, I'll admit).
"PROFESSIONNAL PROGRAMMING" is paid programming. So this is an
offer on sponsorship by you?
"Configure a sensible firewall policy that allows pgAdmin to perform
lookups? If your firewall doesn't allow you to do this, throw it in the
bin and get a decent one."
I was wondering if you had a constructive solution, since the
organization I work in uses Norton Anti Virus and Internet Firewall as
a standard and I can't simply just "throw it in the bin." I hate
having to try to configure a new rule, have pgAdmin hang and then retry
a new rule.
The Norton Anti Virus and foobar is probably the worst "security
solution" one can buy. Maybe your company should invest in a
consultant rather then believe in false security?
You dont believe? Scan securityfocus mailinglist for further details.
Since, I don't need a DNS server (I'm using ip addresses rather than
names to access PostgreSQL on another server), maybe there could be an
option added that disables this "feature".
Why? You could as well add sensible configuration - which is the whole
point of having a firewall :-) Btw, the sources are open - you
can make and submit a patch if you dont like particular implementation :-)
You can even privately patch your copy in any way you like.
---------------------------(end of broadcast)---------------------------
TIP 3: Have you checked our extensive FAQ?
http://www.postgresql.org/docs/faq
