iptables how to close mysql port 3306

[A. Khattri]

On Mon, 3 Apr 2006, Ted Potter wrote:

> To make it fun, no I can not install anything. No there is not gui.
> Everthing I do must be from
> the command line on the box. Bout the only blessing is I can ssh in to the
> box as root.
>
> Thanks for any who care to play and share.
>
> PS
>
> I tried the following:
>
> iptables -A INPUT -p tcp -d 3306 -j REJECT
>
> then I see
>
> iptables --list
> REJECT tcp -- anywhere 0.0.12.234 reject-wthi icmp-port-unreachable
>
> and I can still log on to the server remotely.

Much easier to edit /etc/my.cnf and tell MySQL to not use networking
(skip-networking) or tell it to listen on 127.0.0.1 (bind-address).



--