Re: [GENERAL] postgres "on in the internet"

2004-09-10 Thread Chris Travers
Hi all; Comments inline. Lincoln Yeoh wrote: I doubt it's a good idea to make your postgres server internet accessible. You'll be using postgresql in what I'd consider to be a less tested scenario. Most people don't expose their database servers to the Internet. You could use the following conf

Re: [GENERAL] postgres "on in the internet"

2004-09-03 Thread Paul Tillotson
How difficult is it to set up VPN? I know that in the past my company has used VPN tunnels, but this was difficult for our remote users to get set up. I am actually willing to trade *some* security for ease of installation and simplicity. This will have to be deployed on 30 to 40 client computer

Re: [GENERAL] postgres "on in the internet"

2004-09-03 Thread Daniel Martini
Hi, Citing Paul Tillotson <[EMAIL PROTECTED]>: > At my company we are looking at deploying clients for our client/server > app outside our firewall, which will then require our postgres box to be > internet-accessible. > > Does anyone out there have experience with this or

Re: [GENERAL] postgres "on in the internet"

2004-09-03 Thread Lincoln Yeoh
I doubt it's a good idea to make your postgres server internet accessible. You'll be using postgresql in what I'd consider to be a less tested scenario. Most people don't expose their database servers to the Internet. You could use the following configuration: client (with IPSEC VPN) | Internet

Re: [GENERAL] postgres "on in the internet"

2004-09-03 Thread Po Eddie Lim
ot; <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Friday, September 03, 2004 8:42 AM Subject: Re: [GENERAL] postgres "on in the internet" > > Does anyone out there have experience with this or recommended best > > practices? We have been looking at either (a)

Re: [GENERAL] postgres "on in the internet"

2004-09-03 Thread Frank Knobbe
On Thu, 2004-09-02 at 18:35, Paul Tillotson wrote: > At my company we are looking at deploying clients for our client/server > app outside our firewall, which will then require our postgres box to be > internet-accessible. Besides the already mentioned SSL session, consider tunneling postgres o

[GENERAL] postgres "on in the internet"

2004-09-03 Thread Po Eddie Lim
an" <[EMAIL PROTECTED]>; "Paul Tillotson" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Friday, September 03, 2004 4:12 PM Subject: Re: [GENERAL] postgres "on in the internet" > Hello... > > Is it possible in PostGre 7.3 to query the size of a tex

Re: [GENERAL] postgres "on in the internet"

2004-09-03 Thread Gaetano Mendola
Mike Mascari wrote: Paul Tillotson wrote: At my company we are looking at deploying clients for our client/server app outside our firewall, which will then require our postgres box to be internet-accessible. Does anyone out there have experience with this or recommended best practices? We have bee

Re: [GENERAL] postgres "on in the internet"

2004-09-03 Thread Jeff Amiel
Well...if it's truly a client/server app, why not have the client app talk to the server who actually executes the SQL. That way no remote access to the database is required. IMHO, it's a 'bad thing' to have your database exposed to the internet Jeff Amiel Paul Tillotson wrote: At my compan

Re: [GENERAL] postgres "on in the internet"

2004-09-02 Thread Mike Mascari
Paul Tillotson wrote: At my company we are looking at deploying clients for our client/server app outside our firewall, which will then require our postgres box to be internet-accessible. Does anyone out there have experience with this or recommended best practices? We have been looking at either

Re: [GENERAL] postgres "on in the internet"

2004-09-02 Thread Mike Nolan
> Does anyone out there have experience with this or recommended best > practices? We have been looking at either (a) tunnelling everything > over ssh, or (b) just making sure that users have "strong" passwords and > requiring "md5" authentication in pg_hba.conf. Have you considered using VPN

Re: [GENERAL] postgres "on in the internet"

2004-09-02 Thread Joshua D. Drake
Hello, I don't know if the C# postgresql provider can do this, but you can use PostgreSQL with SSL + MD5 which would be fairly secure. Another option would be to have them authenticate via a web application that would open a tunnel specifically for that user per IP. Sincerely, Joshua D. Drake Pa

[GENERAL] postgres "on in the internet"

2004-09-02 Thread Paul Tillotson
At my company we are looking at deploying clients for our client/server app outside our firewall, which will then require our postgres box to be internet-accessible. Does anyone out there have experience with this or recommended best practices? We have been looking at either (a) tunnelling ev