Remote MySQL Question

[mediumfriedchips]

Hello Folks.
I have a question related to remote MySQL.

What I am looking for is if I enable port 3306 on csf will anyone be able to connect to that port or do they specifically have to add their IP to Access Hosts under MySQL Management ?

What I am asking is I want to enable it for everyone but I need a little bit of security where only allowed IPs can connect and the users can manage them themselves but no random person on the internet can just connect.

 

[Zhenyapan]

When you add 3306 to allowed - you just allow to see this port and make connections. Then you still need add remote IP to allowed hosts.

 

[gate2vn]

For remote SQL server, you would like to have it connect to the web server via a private network, not a public network. By doing that, not only for securing, but also for performance. Then in CSF or any other firewall, you just need to open port 3306 on private network, not public.

 

[Ohm J]

even there have allowed hosts feature inside Mysql, it still can use to DDoS attack if open public connection.