How to enable Mysql 3306 port for a particular IP and deny for all ?

[whUK-Reeve]

If you want to secure the mysql service on the server and also want to disable the remote mysql connections on the server then you can achieve this by following the below steps :

root@server[#] vi /etc/csf/csf.conf

Then search for the line :
# Allow incoming TCP ports
and the remove the port : 3306

and also search for the line :

# Allow outgoing TCP ports
and remove the port : 3306

Save and Quit.

then open the csf.allow file

root@server[#] vi /etc/csf/csf.allow
and add the entry as :

tcp:in:d=3306:s=127.0.0.1

And then just restart the CSF service

root@server[#] csf -r

Note : Replace 127.0.0.1 with the IP for which you want to Allow access.

That's all you are done.

[Dan]

Thank you Reeve.

MySQL is one of many applications that are usually secured to prevent any brute force attempts, and data breaches.