问题描述
我正在尝试使用sudo ufw allow 5432/tcp的ufw在ubuntu上打开端口5432
然后，我使用nmap查看端口5432是否已打开，并且得到以下信息：
root@domain:~# sudo nmap -sS -O 127.0.0.1
Starting Nmap 5.21 ( http://nmap.org ) at 2011-12-01 14:28 MSK
Nmap scan report for localhost.localdomain (127.0.0.1)
Host is up (0.000084s latency).
Not shown: 994 closed ports
PORT STATE SERVICE
22/tcp open ssh
25/tcp open smtp
80/tcp open http
587/tcp open submission
5432/tcp open postgresql
10000/tcp open snet-sensor-mgmt
Device type: general purpose
Running: Linux 2.6.X
OS details: Linux 2.6.15 - 2.6.30
Network Distance: 0 hops
OS detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 2.28 seconds
root@domain:~# sudo nmap -sS -O 1xx.xxx.xxx.xxx
Starting Nmap 5.21 ( http://nmap.org ) at 2011-12-01 14:30 MSK
Nmap scan report for domain.info (1xx.xxx.xxx.xxx)
Host is up (0.000086s latency).
Not shown: 997 closed ports
PORT STATE SERVICE
22/tcp open ssh
80/tcp open http
10000/tcp open snet-sensor-mgmt
Device type: general purpose
Running: Linux 2.6.X
OS details: Linux 2.6.15 - 2.6.30
Network Distance: 0 hops
OS detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 2.65 seconds
1xx.xxx.xxx.xxx是我的服务器的IP。
我已经编辑了pg_hba.conf：
# DO NOT DISABLE!
# If you change this first entry you will need to make sure that the
# database
# super user can access the database using some other method.
# Noninteractive
# access to all databases is required during automatic maintenance
# (custom daily cronjobs, replication, and similar tasks).
#
# Database administrative login by UNIX sockets
local all postgres ident
# TYPE DATABASE USER CIDR-ADDRESS METHOD
# "local" is for Unix domain socket connections only
local all all ident
# IPv4 local connections:
host all all 0.0.0.0/0 md5
# IPv6 local connections:
host all all ::1/128 md5
但是端口5432尚未打开。
最佳思路
您需要编辑pg_hba.conf：
host all all 192.168.0.0/24 trust
这允许每个192.168.0.0/24网络进行连接。所有的wild-card将是0.0.0.0/0。更多信息here。
然后编辑postgresql.conf并更改listen_address：
listen_addresses='*'