Results 1 to 6 of 6
  1. #1
    Join Date
    Mar 2009
    Posts
    3,700

    how can i make sure my cpanel is disable remote mysql connection ?

    Hi,

    on my cpanel server,i make sure the TCP_IN does not have 3306 on csf.conf,

    but user tell me he ever add his remote ip within his cpanel and it works,

    is any way to check if 100% other server can not remote connect my server's mysql ?

  2. #2
    You can bind Mysql to localhost by adding the following in the /etc/my.cnf file and restarting the mysql service.

    bind-address=127.0.0.1
    | LinuxHostingSupport.net
    | Server Setup | Security | Optimization | Troubleshooting | Server Migration
    | Monthly and Task basis services.
    | MSN : madaboutlinux[at]hotmail.com | Skype : madaboutlinux

  3. #3
    Join Date
    Mar 2009
    Posts
    3,700
    Quote Originally Posted by madaboutlinux View Post
    You can bind Mysql to localhost by adding the following in the /etc/my.cnf file and restarting the mysql service.
    but it seems mysql upgrade will overwrite existing my.cnf setting(i recently upgrade mysql from whm),is it possible set it via csf ?

  4. #4
    Join Date
    Apr 2007
    Location
    Everywhere
    Posts
    273
    Quote Originally Posted by ttgt View Post
    but it seems mysql upgrade will overwrite existing my.cnf setting(i recently upgrade mysql from whm),is it possible set it via csf ?
    Mysql upgrade should not alter your my.cnf file. However, Since it needs to be done manually you need to review your my.cnf settings after any major upgrades.

    You can add the following variable to your my.cnf file then restart your mysql server:

    Code:
    skip-networking
    You can remove any entries for port 3306 from your csf config file at /etc/csf/csf.conf then restart CSF.

  5. #5
    Join Date
    Mar 2009
    Posts
    3,700
    Quote Originally Posted by AttackerNET View Post
    You can remove any entries for port 3306 from your csf config file at /etc/csf/csf.conf then restart CSF.

    do you mean if i can not find any 3306 record within /etc/csf/csf.conf,
    there is no server to remote connect my mysql ?

  6. #6
    Right, if you remove 3306 from the CSF configuration, the port will be blocked for all remote machines. To verify, you can try telnet to port 3306 of your server from your computer or other server once the port is blocked.

    If you cannot achieve it for some reason, the method explained earlier will surely help. Mysql upgrade won't remove the my.cnf file, however, if you place a new my.cnf file, you have to copy the entry manually.
    | LinuxHostingSupport.net
    | Server Setup | Security | Optimization | Troubleshooting | Server Migration
    | Monthly and Task basis services.
    | MSN : madaboutlinux[at]hotmail.com | Skype : madaboutlinux

Similar Threads

  1. how to enable and check mysql remote connection on cpanel/csf ?
    By ttgt in forum Hosting Security and Technology
    Replies: 8
    Last Post: 11-07-2013, 02:33 PM
  2. Remote Connection to MySQL (cPanel)
    By Zimple in forum Hosting Software and Control Panels
    Replies: 2
    Last Post: 07-17-2013, 12:12 PM
  3. Cpanel Mysql remote connection USE EXIST DB
    By xilu87 in forum Hosting Security and Technology
    Replies: 0
    Last Post: 06-29-2009, 04:12 AM
  4. cPanel/WHM setting up remote mysql connection
    By BurakUeda in forum Hosting Software and Control Panels
    Replies: 2
    Last Post: 01-09-2007, 11:38 PM
  5. disable version number in mysql connection banner?
    By ub3r in forum Hosting Security and Technology
    Replies: 1
    Last Post: 04-23-2006, 11:27 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •