The grant was done by:

# echo "grant INSERT,SELECT on snort.* to
snortdb@'XXX.XXX.0.0/255.255.0.0';" | mysql -u root -p

The system has TCP wrappers setup and the hosts.allow file is empty and
hosts.deny is set to ALL:ALL.  next time I'm at work I'll try putting in
hosts.allow the ip address of the sensor and see what happens.

> > I've spent most of this day reading and rereading the documents on setting up
> > MySQL.  I'm currently working on NIDS and have setup MySQL on the same box as
> > the sensor for logging of packets to verify that I had the NIDS setup
> > correctly for db logging.  I then installed MySQL (binary rpm version) on a
> > server and configured it.  I added the user (who also exists on that
> > system) and granted it insert and select privledges and set the host to be a
> > class b subnet (xxx.xxx.0.0/255.255.0.0).  when I try to test the connection
> > remotely I get an error (1130) saying Host '' is not allowed to connect.  The
> > machine has no DNS entry and since the system is from that range of IP's I
> > don't see why it says connection refused.  
> 
> Sounds like a problem with reloading the privileges table. Did you
> actually use the "GRANT" statement to add these privileges? If not --
> if you just did an INSERT/UPDATE -- then you need to issue a "FLUSH
> PRIVILEGES" or "mysqladmin -u root -p reload". If you *did* use a
> GRANT statement, then reloading of the privilege tables is automatic.
> 
>     http://www.mysql.com/doc/P/r/Privilege_changes.html
> 
> 
> > While logged in locally at the box I tried doing a telnet localhost 3306 and
> > got a refused connection, but when I tried telnet <hostname> 3306 I get a few
> > garbage characters (this is from the box that will do the logging to
> > itself).  When I tried telnetting from the remote box I again get the host not
> > allowed message.
> 
> Refused connection from localhost must have something to do with local
> firewall rules. Nothing that MySQL is doing (at the level of making a
> TCP/IP connection) would result in this kind of behavior (localhost
> refused; remote allowed).
> 
> 
> Regards,
> 
>     Matt
> 
> -- 
>    __  ___     ___ ____  __ 
>   /  |/  /_ __/ __/ __ \/ /   Matt Wagner <[EMAIL PROTECTED]>
>  / /|_/ / // /\ \/ /_/ / /__  MySQL AB, http://www.mysql.com/
> /_/  /_/\_, /___/\___\_\___/  River Falls, Wisconsin, USA
>        <___/       Developer
> 
> 


---------------------------------------------------------------------
Before posting, please check:
   http://www.mysql.com/manual.php   (the manual)
   http://lists.mysql.com/           (the list archive)

To request this thread, e-mail <[EMAIL PROTECTED]>
To unsubscribe, e-mail <[EMAIL PROTECTED]>
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php

Reply via email to