Third-party software database connection

[fabioweb90]

Hello, a client asked me to allow a software connecting with a database. In short there is a software hosted somewhere that need access to my database
Here the message that third-party software wrote to my client

Unfortunately, your hosting provider doesn't allow connections to the database with third-party software I'm afraid.
Please, contact your hosting provider to ask if it is possible to allow connections only for a certain IP or something similar.

Is it possible to allow external database connection with Directadmin for a database only?
Thanks for helping

 

[Daniel_Dog]

See: https://docs.directadmin.com/other-...-your-mysql-database-from-a-remote-connection

 

[Daniel_Dog]

But do note that the firewall by default blocks port 3306 and thus you also need to allow 3306 to not be blocked in the firewall.

 

[fabioweb90]

Thanks i can check with following command
lsof -i
if port is open or not
then with
firewall-cmd --zone=public --add-port=3306/tcp --permanent
i can open that port right?

 

[Daniel_Dog]

Thanks i can check with following command
lsof -i
if port is open or not
then with
firewall-cmd --zone=public --add-port=3306/tcp --permanent
i can open that port right?

Yes you can open the port 3306 for in and out trafic. Do note tho that there is a reason why most firewalls block access to 3306 by default. (See: https://security.stackexchange.com/...-not-safe-to-open-mysqls-port-to-the-internet)

 

[fabioweb90]

Yeah i can understand. I read about restric remote access to a specific IP in this way

sudo firewall-cmd --new-zone=mysqlzone --permanent
sudo firewall-cmd --reload
sudo firewall-cmd --permanent --zone=mysqlzone --add-source=10.8.0.5/32
sudo firewall-cmd --permanent --zone=mysqlzone --add-port=3306/tcp
sudo firewall-cmd --reload

What do you think?