Document the purpose of the GUC listen_addresses.

diff --git a/doc/src/sgml/config.sgml b/doc/src/sgml/config.sgml
index ee28bbb107902560c26ced80fd8a946f07c7d492..ed7a0df7ca8c20a50f7b991313f639d73bda4878 100644 (file)
--- a/doc/src/sgml/config.sgml
+++ b/doc/src/sgml/config.sgml
@@ -1,4 +1,4 @@
-
+
 
 
   Server Configuration
@@ -329,8 +329,14 @@ SET ENABLE_SEQSCAN TO OFF;
          at all, in which case only Unix-domain sockets can be used to connect
          to it.
          The default value is localhost,
-         which allows only local loopback connections to be made.
-         This parameter can only be set at server start.
+         which allows only local loopback connections to be
+         made.  While client authentication (
+         linkend="client-authentication">) allows fine-grained control
+         over who can access the server, listen_addresses
+         controls which interfaces accept connection attempts, which
+         can help prevent repeated malicious connection requests on
+         insecure network interfaces.  This parameter can only be set
+         at server start.