Re: firewall ports to open

2004-01-13 Thread Paul DuBois
At 11:53 -0600 1/13/04, Steve Buehler wrote: I am trying to allow someone to access our mysql server that is behind our firewall. If I open the firewall ports 3306-65000/tcp the person can get through. If I just try to open up the port 3306/tcp, they can not get through. Is there another port

Re: firewall ports to open

2004-01-13 Thread Eldon Ziegler
Our server works with remote access just with 3306/tcp. Maybe it's something to do with what you are using to access mysql. At 12:53 pm 1/13/2004, you wrote: I am trying to allow someone to access our mysql server that is behind our firewall. If I open the firewall ports 3306-65000/tcp the pers

Re: firewall

2001-05-11 Thread Basil Hussain
Hi, > can i use a (win) gui mysql client, if i have > a firewall installed between my intranet and > mysql server. how? You should have no trouble, so long as your firewall allows port 3306 through. Also, if your firewall performs Network Address Translation (NAT) then you'll need to make sure t

Re: Firewall logged probes on mysql port

2001-04-05 Thread Steve Brazill
One thing you should do to protect your MySQL 'instance' , is have it running on a system 'behind' your 'front line' defenses (i.e. Firewall) and not 'on it'. Setup MySQL to listen only on the interface that your webserver or other 'client' is communicating on (we have a 'private' network conne

Re: Firewall logged probes on mysql port

2001-04-05 Thread Steve Brazill
Maybe they just seeing if MySQL is 'as open' as Interbase... http://www.securityfocus.com/frames/?content=/templates/advisory.html%3Fid%3D3152 There are a lot of 'robotic probes' going on out there (most commonly looking for FTP access). Just 'batten down the hatches' and keep monitoring...

Re: Firewall logged probes on mysql port

2001-04-05 Thread B. van Ouwerkerk
It's late.. I want to catch some sleep.. but I found a few on the incidents list.. http://www.securityfocus.com/bid/926 http://www.securityfocus.com/bid/975 According to some people on the incidents lists there seems to be one or two probes going on for MySQL servers.. dunno what they're look

Re: Firewall logged probes on mysql port

2001-04-05 Thread Van
Gary Huntress wrote: > > My firewall has denied and logged several of the following messages: > > Packet log: input DENY eth0 PROTO=6 192.168.0.1:37656 66.31.176.185:3306 > L=40 S=0x00 I=26581 F=0x T=39 (#2) > > As you can see, it is a spoofed IP trying to connect to the mysql port. > I've