Hello all,

I've got mysqld owork on my server so I can use it on my web-sites.

But it it's listening a port for remote connections.

How can I set mysqld to run strictly local?

Thanks for your precious time.

I believe it is a server. You can prolly shut it off by firewall or there may be a switch to stop it listening. Maybe killing the daemon???????

There may be an option in the my.cnf file to select which address mysql listens on (but I'm not aware of one).

As mossy mentioned, you may want to throw up a firewall.

Also, mysql has its own security about which users can connect to which hosts. See http://www.mysql.com/doc/en/GRANT.html

It differentiates localhost users from users on other hosts. But application security isn't as good as just not listening on a public address..

Yes I could do that, but I wanted to know the daemon switch way, I belive there is one.
If anyone knows it pls tell me.

I am aware that there have been some remote exploits for mysqld and I really wanted to shut that door.

Thanks alot for your precious time

Hi,

I found this in the manual pages at mysql.com.

/etc/my.conf

[mysqld]
datadir=/usr/local/mysql/var
socket=/var/tmp/mysql.sock
port=3306
user=mysql

I haven't test it because the server is beeing upgraded (RAM).
I'll try to set the port to 0 or leave with empty.
I'm just afraid that to local connections it gets stuck.

Still i belice there is some switch or other config argument for this... changing the port is for remote connections and as well for local connections, I don't belive it will work fine with the port changed.

Still I can set it to a very high port where no one can see it, or simply block it with the firewall (wich I dont use).


Thanks for all your help!

Gn8 all

After a quick check, it looks like bind-address is the /etc/my.cnf setting you need:
http://www.mysql.com/doc/en/Privileges_options.html

Either that, or skip-networking.