Topic: limit MySQL remote access by IP

[mike_mattos]

IS there a way to limit remote access to MySQL similar to the Server-Manager remote access?   

I would like all work-stations and servers I manage to have read/write access to a MySQL database on my personal server.  ( about half a dozen fixed IP's ) 

I'd prefer not to have public access if possible.  Saves a lot of work if I can push all the data to my server.  The server does NOT host a website.

Thx

[janet]

mike_mattos

IIRC when you create passwords for the mysql tables, you can specify IPs

[mike_mattos]

mysql> GRANT ALL PRIVILEGES ON *.* TO USER-NAME@IP IDENTIFIED BY "PASSWORD";

USER-NAME is the username that you would like to create,  IP is the public IP address of your remote connection (like '195.x.y.z')

This limits the database access, but would it not still allow global attempts to login to the MySQL server ?  I'd rather not have hackers trying to log in at all.

[janet]

mike_mattos

Well you have not really explained your situation that well.
All all the workstations IPs on the LAN ?

If you do not open mysql access then external (WAN) users cannot access it

see
http://wiki.contribs.org/MySQL#Access_MySQL_from_the_local_network
&
http://wiki.contribs.org/MySQL#Access_MySQL_from_a_remote_network

Also see
http://wiki.contribs.org/MySQL#Allow_mysql_login_from_any_LAN_workstation

If you do not enable remote access (WAN) then what is the problem.
All tables will be password protected & as other IPs are not specified then no one can gain access.

Yes there is an inherent danger in opening mysql to the world, that is why it is not really recommended, the wiki article talks about using a VPN connection, or an SSH tunnel, or (at a minimum), restrict the allowed login hosts to their internet IP address.

[CharlieBrady]

This limits the database access, but would it not still allow global attempts to login to the MySQL server ?  I'd rather not have hackers trying to log in at all.

So don't open up mysql access at all. By default it is only accessible from localhost.