Allow Remote MySQL Checklist

osirion

• January 29, 2018 06:39

Hi Guys, Currently I have to whitelist each of my customers IP's for remote mysql access on 3306. However, we have dynamic IP's in our country and so adding/updating IP's on the firewalls allow every day is a real pain. Looking to open up port 3306; but what measures should I take to ensure the security of the server (especially from a cPanel perspective/settings)? Thanks in advance...

• 

  24x7server

  • January 30, 2018 06:36

  Hi,

  Looking to open up port 3306; but what measures should I take to ensure the security of the server

  
  If you are on a shared server, never do this, as opening 3306 publically will have a risk of big time SQL injection.. It is always advised to have the IP added that requires access to the MySQL.. You can create shell script to make your work easy if you want, but this is the best method advisable..

  0
• 

  osirion

  • January 30, 2018 07:03

  Yeah, this is a shared hosting environment for 100s of clients. Running on cPanel with CloudLinux / LVE / CSF / LFD and strong passwords etc.

  0
• 

  cPanelMichael

  • January 31, 2018 16:57

  Hello, Have you considered allowing an IP range instead of allowing access to all IP addresses? Thank you.

  0

Please sign in to leave a comment.