iptables and mysql...

[Crucificator]

Jason Dixon wrote:

> On Jul 2, 2004, at 9:34 AM, bruce wrote:
>
>> i'm investigating what needs to be done to allow mysql on a server to be
>> used remotely by client machines. each machine is running iptables. 
>> so i'm
>> wondering what has to be in the iptables for the machine being used 
>> as the
>> mysql server, as well as the client machines that will be 
>> communicating with
>> the mysql box...
>
>
> If you're concerned with data sniffing in transit, you might also 
> consider one of the following:
>
> - tunnelling your client connections through SSH
> - MySQL-4.x supports SSL connections with x.509 certificates
>
> HTH.
>
> -- 
> Jason Dixon, RHCE
> DixonGroup Consulting
> http://www.dixongroup.net
>
>
>
mostly when you put up a mysql server you need it for building dynamic 
pages with php let's say. So when you do such thing you only need to 
allow connections from localhost because connection is made from 
server-side. If this doesn't apply to you then you should check out stunnel.