From: Bruce Momjian <bruce@momjian.us>
Date: Sat, 3 Oct 2009 23:10:47 +0000 (+0000)
Subject: Document the purpose of the GUC listen_addresses.
X-Git-Tag: REL8_5_ALPHA2~41
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=41f89e3bbc3138d82fe26084236f9687414091e4;p=postgresql

Document the purpose of the GUC listen_addresses.
---

diff --git a/doc/src/sgml/config.sgml b/doc/src/sgml/config.sgml
index ee28bbb107..ed7a0df7ca 100644
--- a/doc/src/sgml/config.sgml
+++ b/doc/src/sgml/config.sgml
@@ -1,4 +1,4 @@
-<!-- $PostgreSQL: pgsql/doc/src/sgml/config.sgml,v 1.229 2009/09/22 23:43:37 tgl Exp $ -->
+<!-- $PostgreSQL: pgsql/doc/src/sgml/config.sgml,v 1.230 2009/10/03 23:10:47 momjian Exp $ -->
 
 <chapter Id="runtime-config">
   <title>Server Configuration</title>
@@ -329,8 +329,14 @@ SET ENABLE_SEQSCAN TO OFF;
          at all, in which case only Unix-domain sockets can be used to connect
          to it.
          The default value is <systemitem class="systemname">localhost</>,
-         which allows only local <quote>loopback</> connections to be made.
-         This parameter can only be set at server start.
+         which allows only local <quote>loopback</> connections to be
+         made.  While client authentication (<xref
+         linkend="client-authentication">) allows fine-grained control
+         over who can access the server, <varname>listen_addresses</varname>
+         controls which interfaces accept connection attempts, which
+         can help prevent repeated malicious connection requests on
+         insecure network interfaces.  This parameter can only be set
+         at server start.
        </para>
       </listitem>
      </varlistentry>