does debian have any firewall installed?

g_srinivas · 02-14-2006, 11:14 AM

Hello,
I am using Debian v3.1 (Sarge), with all stable packages. Recently I installed and configured MySQL5/Apache2/PHP5, and for now everything works fine but with one small problem with MySQL5.

I am having a windows xp professional also on the same network where my debian system also lies. Now, I am able to ping or ssh to linux from my windows xp pc, but I am not able to connect to MySQL using MySQL Administrator from windows. I doubt that maybe there is debian firewall which might be blocking the 3306 port which is used by MySQL.

So, can anyone please tell me how can I check if the problem is because of the port getting blocked or not? and if so then how can I unblock port 3306 in debian?

Thanks in advance.

ethics · 02-14-2006, 11:27 AM

man iptables

iptables is a firewall built into the kernel, it may be that there are existing rules in effect preventing it.

that said is it not seeing MYSQL or is it not letting you login?

tuxrules · 02-14-2006, 11:29 AM

I would not think that a out-of-the-box debian would be running a firewall. Check on the debian box for any iptables rules deployed. If you are not able to connect to port 3306, MySQL may be starting with a --skip-networking option. As far as I know, this would make the db server not accept any connections on port 3306.

Tux,

g_srinivas · 02-14-2006, 11:38 AM

Thanks for the quick reply. When i try to connect through MySql Administrator, i get the following error:

Code:

Could not connect to the specified instance.

MySQL Error Number 1130
Host 'xp-system' is not allowed to connect to this MySQL server

If you want to check the network connection, please click the Ping button.

And when i try to ping, i successfully get reply. The network connection between the two systems is fine (i'm sure about this).

Regarding, # man iptables i get the manual so i guess the firewall is integrated into my kernel. So could please tell me how to unblock port 3306?

tuxrules · 02-14-2006, 11:58 AM

Quote:

And when i try to ping, i successfully get reply. The network connection between the two systems is fine (i'm sure about this).

Well then, try and see if what startup options your have for mysql. You can check /etc directory for my.cnf file (there may be several). Open up that file and look for --skip-networking option. I don't know much about debian but you can try.

Quote:

Regarding, # man iptables i get the manual so i guess the firewall is integrated into my kernel. So could please tell me how to unblock port 3306?

Having iptables installed doesn't mean you have it running. You have to actually construct rules and then start iptables service for a firewall to take effect.

Have you tried googling for your particular problem?

Tux,

tuxrules · 02-14-2006, 12:01 PM

http://www.google.com/search?hl=en&l...30&btnG=Search

Something that may interest you...

g_srinivas · 02-14-2006, 12:02 PM

I checked MySql's my.cnf and skip_networking variable is disabled. Acutally i only disabled it as this would be first thing i need to disable if i need to access MySql through network.

I tried googling but.. didnt find any solution related to my problem, so i posted in this forum.

g_srinivas · 02-14-2006, 12:11 PM

Thanks tuxrules, the link worked and the solution was to grant privileges to the user account through which i am trying to access MySQL Administrator.

GRANT ALL PRIVILEGES ON *.* TO 'myuser'@'%' IDENTIFIED BY 'mypassword' WITH GRANT OPTION;

I have installed MySQL before on windows and never had to do this so never thought in this direction. Anyways, now that it worked thanks.