Skip to main content

MySQL binding warning cannot be fixed

jagonoja
I am trying to address the warnings of the security advisor, but I cannot fix this one: [QUOTE]The MySQL service is currently configured to listen on all interfaces: (bind-address=*)
In my /etc/
folder there are two MySQL conf files: my.cnf
and my.cnf.mysqlup.8.0
(which appeared after updating MySQL to version 8). I have edited both so that they contain, near the end, the line bind-address=127.0.0.1
Yet, after restarting MySQL a few times, the warning of the Security Advisor doesn't disappear. What am I doing wrong?

Comments

6 comments

Date Votes
  • andrew.n
    what does "netstat -ntpln" show?
    0
  • jagonoja
    sorry I made a mistake, reply follows
    0
  • jagonoja
    what does "netstat -ntpln" show?

    Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:2077 0.0.0.0:* LISTEN 521/cpdavd - accept tcp 0 0 0.0.0.0:2078 0.0.0.0:* LISTEN 521/cpdavd - accept tcp 0 0 0.0.0.0:2079 0.0.0.0:* LISTEN 521/cpdavd - accept tcp 0 0 0.0.0.0:2080 0.0.0.0:* LISTEN 521/cpdavd - accept tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN 403/dovecot tcp 0 0 0.0.0.0:2082 0.0.0.0:* LISTEN 417/cpsrvd (SSL) - tcp 0 0 127.0.0.1:579 0.0.0.0:* LISTEN 527/cPhulkd - proce tcp 0 0 0.0.0.0:2083 0.0.0.0:* LISTEN 417/cpsrvd (SSL) - tcp 0 0 0.0.0.0:995 0.0.0.0:* LISTEN 403/dovecot tcp 0 0 0.0.0.0:2086 0.0.0.0:* LISTEN 417/cpsrvd (SSL) - tcp 0 0 0.0.0.0:2087 0.0.0.0:* LISTEN 417/cpsrvd (SSL) - tcp 0 0 0.0.0.0:2090 0.0.0.0:* LISTEN 521/cpdavd - accept tcp 0 0 0.0.0.0:2091 0.0.0.0:* LISTEN 521/cpdavd - accept tcp 0 0 0.0.0.0:587 0.0.0.0:* LISTEN 447/exim tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN 403/dovecot tcp 0 0 127.0.0.1:783 0.0.0.0:* LISTEN 19463/perl tcp 0 0 0.0.0.0:2095 0.0.0.0:* LISTEN 417/cpsrvd (SSL) - tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN 403/dovecot tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 8863/httpd tcp 0 0 0.0.0.0:2096 0.0.0.0:* LISTEN 417/cpsrvd (SSL) - tcp 0 0 0.0.0.0:465 0.0.0.0:* LISTEN 447/exim tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 7588/pure-ftpd (SER tcp 0 0 [IP NUMBER OF THE SERVER]:53 0.0.0.0:* LISTEN 569/named tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 569/named tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 6959/sshd tcp 0 0 127.0.0.1:953 0.0.0.0:* LISTEN 569/named tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 447/exim tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 8863/httpd tcp6 0 0 :::993 :::* LISTEN 403/dovecot tcp6 0 0 :::995 :::* LISTEN 403/dovecot tcp6 0 0 :::3306 :::* LISTEN 20767/mysqld tcp6 0 0 :::587 :::* LISTEN 447/exim tcp6 0 0 :::110 :::* LISTEN 403/dovecot tcp6 0 0 :::143 :::* LISTEN 403/dovecot tcp6 0 0 :::80 :::* LISTEN 8863/httpd tcp6 0 0 :::465 :::* LISTEN 447/exim tcp6 0 0 :::21 :::* LISTEN 7588/pure-ftpd (SER tcp6 0 0 :::22 :::* LISTEN 6959/sshd tcp6 0 0 :::25 :::* LISTEN 447/exim tcp6 0 0 :::443 :::* LISTEN 8863/httpd
    MySQL port is 3306 but I don't see it here. Not sure what that means...
    0
  • quietFinn
    I have edited both so that they contain, near the end, the line bind-address=127.0.0.1

    Is that under the [mysqld] section? You say "near the end" so it might be under another section. File my.cnf.mysqlup.8.0 has no effect whatsoever,
    0
  • jagonoja
    Is that under the [mysqld] section? You say "near the end" so it might be under another section. File my.cnf.mysqlup.8.0 has no effect whatsoever,

    Dang, I didn't know the sections mattered. I moved it under mysqld and it works now. The warning has disappeared. Thanks!
    0
  • andrew.n
    Good job :)
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post