在 ubuntu 上打开 5432 端口

Question

我正在尝试使用 ufw 在 ubuntu 上打开端口 5432 使用 sudo ufw allow 5432/tcp

然后我使用 nmap 来查看端口 5432 是否已打开，我得到了这个：

root@domain:~# sudo nmap -sS -O 127.0.0.1

Starting Nmap 5.21 ( http://nmap.org ) at 2011-12-01 14:28 MSK
Nmap scan report for localhost.localdomain (127.0.0.1)
Host is up (0.000084s latency).
Not shown: 994 closed ports
PORT      STATE SERVICE
22/tcp    open  ssh
25/tcp    open  smtp
80/tcp    open  http
587/tcp   open  submission
5432/tcp  open  postgresql
10000/tcp open  snet-sensor-mgmt
Device type: general purpose
Running: Linux 2.6.X
OS details: Linux 2.6.15 - 2.6.30
Network Distance: 0 hops

OS detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 2.28 seconds


root@domain:~# sudo nmap -sS -O 1xx.xxx.xxx.xxx

Starting Nmap 5.21 ( http://nmap.org ) at 2011-12-01 14:30 MSK
Nmap scan report for domain.info (1xx.xxx.xxx.xxx)
Host is up (0.000086s latency).
Not shown: 997 closed ports
PORT      STATE SERVICE
22/tcp    open  ssh
80/tcp    open  http
10000/tcp open  snet-sensor-mgmt
Device type: general purpose
Running: Linux 2.6.X
OS details: Linux 2.6.15 - 2.6.30
Network Distance: 0 hops

OS detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 2.65 seconds

1xx.xxx.xxx.xxx 是我服务器的ip。

---

我已经编辑了 pg_hba.conf：

# DO NOT DISABLE!
# If you change this first entry you will need to make sure that the
# database
# super user can access the database using some other method.
# Noninteractive
# access to all databases is required during automatic maintenance
# (custom daily cronjobs, replication, and similar tasks).
#
# Database administrative login by UNIX sockets
local   all         postgres                          ident

# TYPE  DATABASE    USER        CIDR-ADDRESS          METHOD

# "local" is for Unix domain socket connections only
local   all         all                               ident
# IPv4 local connections:
host    all         all         0.0.0.0/0          md5
# IPv6 local connections:
host    all         all         ::1/128               md5

但端口 5432 尚未打开。

Answer 1

您需要编辑您的pg_hba.conf：

host all all 192.168.0.0/24 trust

这允许每个来自192.168.0.0/24网络的连接。所有人的通配符是0.0.0.0/0。更多信息在这里。

然后编辑postgresql.conf和更改listen_address：

listen_addresses='*'