Re: Shorewall and MySQL problem - solved



On Sun, 11 Feb 2007 19:41:58 +0200, tj wrote:
Here are the lines I added that solved this problem (First shorewall and
last mysql):

rules
-----
ACCEPT net:[ip,ip,ip] fw all

Well, now the system accepts any connection besides mysql for ip,ip,ip
It is a solution for mysql, but your server is now more at risk from
[ip,ip,ip]

When your server is cracked from [ip,ip,ip] and used to attack other
systems, YOU are to blame for not setting a tighter rule.

Do take just a minute to read the /troubleshooting/ link found at
http://www.shorewall.net/Documentation_Index.html
/Connection Problems/ is where I would like to see the minute spent.

interface
---------
net eth0 detect dhcp

Now you can add some net options and get a tighter wall. I'll suggest
routefilter,tcpflags


shorewall.conf
--------------

Did you look in that file to see where your shorewall log messages are sent.

ps. Thanks to BiTwster for the advice and for kicking my arse for being
rude...

Anytime. 8-)
.



Relevant Pages

  • Re: Does apache stop a script mid execution ?
    ... If the user calls a time consuming script and then stops or refreshes ... How does it relate to e.g. a script performing a large mysql query? ... 2.b) how the connection is set up. ... the server stops the script execution. ...
    (comp.lang.php)
  • Re: Does apache stop a script mid execution ?
    ... If the user calls a time consuming script and then stops or refreshes ... the way the client is implemented in the php mysql extension and 2.b) how the connection is set up. ... the server stops the script execution. ...
    (comp.lang.php)
  • Re: hitting the limits
    ... relatively straight forward MySql database. ... 10K visitors a month and an 80Mb database are nothing. ... heavily loaded server. ... But the connection will hang around until the garbage ...
    (comp.lang.php)
  • Re: VFP8 & MySQL
    ... > VFP functions like NVL to a MySQL one, definitely it made the switch very ... > About your connection problem, I have mine setup as default for 100 ... As for the server, we left it ... The server crashed and corrupted the database. ...
    (microsoft.public.fox.programmer.exchange)
  • Re: Shorewall and MySQL problem - solved
    ... Well, now the system accepts any connection besides mysql for ip,ip,ip ... It is a solution for mysql, but your server is now more at risk from ... firewall via poor programming practices. ...
    (comp.os.linux.networking)