Home / server / Questions / 346140
Accepted
Alex Coplan
Asked: 2012-01-04 05:53:08 +0800 CST

Shorewall enabling MySQL port

  • 772

I've recently set up an ubuntu server to host my site - I need to open up port 3306 for MySQL access on my server.

I'm currently using shorewall on my server - how can open incoming connections to 3306 in shorewall? - Here are my current rules (enabling incoming for 80/HTTP and 22/SSH).

ACCEPT        $FW        net        icmp
HTTP/ACCEPT   net        $FW
SSH/ACCEPT    net        $FW

What is the rule name for the MySQL port (3306). Also, is it possible to enable ports just by port not by a name?

firewall linux ubuntu mysql shorewall

2 Answers

  1. 5th column is the destination port:

    ACCEPT      net                     $FW     tcp     3306

    As pointed out it's not a good idea to open your MySQL server to the entire world. At the very least you should limit access to a certain IP(-range):

    ACCEPT      net:192.168.0.0/24      $FW     tcp     3306
    • 3
  2. Best Answer

    You do not want to enable MySQL access from the Internet at large. There is no reason to do so. If you need access for development purposes, just use an ssh tunnel. For local applications, they will be able to access MySQL via socket or loopback without any firewall changes.

    • 3