linux 防火墙打开5432 端口,在Ubuntu上打开端口5432

问题描述

我正在尝试使用sudo ufw allow 5432/tcp的ufw在ubuntu上打开端口5432

然后，我使用nmap查看端口5432是否已打开，并且得到以下信息：

root@domain:~# sudo nmap -sS -O 127.0.0.1

Starting Nmap 5.21 ( http://nmap.org ) at 2011-12-01 14:28 MSK

Nmap scan report for localhost.localdomain (127.0.0.1)

Host is up (0.000084s latency).

Not shown: 994 closed ports

PORT STATE SERVICE

22/tcp open ssh

25/tcp open smtp

80/tcp open http

587/tcp open submission

5432/tcp open postgresql

10000/tcp open snet-sensor-mgmt

Device type: general purpose

Running: Linux 2.6.X

OS details: Linux 2.6.15 – 2.6.30

Network Distance: 0 hops

OS detection performed. Please report any incorrect results at http://nmap.org/submit/ .

Nmap done: 1 IP address (1 host up) scanned in 2.28 seconds

root@domain:~# sudo nmap -sS -O 1xx.xxx.xxx.xxx

Starting Nmap 5.21 ( http://nmap.org ) at 2011-12-01 14:30 MSK

Nmap scan report for domain.info (1xx.xxx.xxx.xxx)

Host is up (0.000086s latency).

Not shown: 997 closed ports

PORT STATE SERVICE

22/tcp open ssh

80/tcp open http

10000/tcp open snet-sensor-mgmt

Device type: general purpose

Running: Linux 2.6.X

OS details: Linux 2.6.15 – 2.6.30

Network Distance: 0 hops

OS detection performed. Please report any incorrect results at http://nmap.org/submit/ .

Nmap done: 1 IP address (1 host up) scanned in 2.65 seconds

1xx.xxx.xxx.xxx是我的服务器的IP。

我已经编辑了pg_hba.conf：

# DO NOT DISABLE!

# If you change this first entry you will need to make sure that the

# database

# super user can access the database using some other method.

# Noninteractive

# access to all databases is required during automatic maintenance

# (custom daily cronjobs, replication, and similar tasks).

#

# Database administrative login by UNIX sockets

local all postgres ident

# TYPE DATABASE USER CIDR-ADDRESS METHOD

# “local” is for Unix domain socket connections only

local all all ident

# IPv4 local connections:

host all all 0.0.0.0/0 md5

# IPv6 local connections:

host all all ::1/128 md5

但是端口5432尚未打开。

最佳思路

您需要编辑pg_hba.conf：

host all all 192.168.0.0/24 trust

这允许每个192.168.0.0/24网络进行连接。所有的wild-card将是0.0.0.0/0。更多信息here。

然后编辑postgresql.conf并更改listen_address：

listen_addresses=’*’

参考资料