I have a dedicated Database server which is have PostgreSQL 9.1.
This server has firewall. Only
10.0.0.3 is allowed to connect and access to this server via Firewall. All other requests from other ip's are rejected.
After allowing this IP, it goes to database server. In database server there is a user called
postgres. This user
has password. But, even with this, only
10.0.0.3 is allowed to connect to this database.
So basically, only
10.0.0.3 is allowed to connect and do stuff.
So, do i really need a password. Due to my custom script i want to remove password and connect directly without password. Should i do that?
At this point what is the benefits of making a password protected user for only 1 restricted IP. Should i continue to use it?
Or let me ask you with this way: If i remove password and set to "blank", what can happen -even if there is a ip restriction-?