I am running mysql with apache and php.

The computer that is running apache is not the same as the mysql server.

lets say apache is 192.168.0.1
and
mysql is 192.168.0.2

Normally I use the below info to connect to Mysql when it is on the same machine however in my case it is not on my same machine.

$result = @mysql_pconnect("localhost", "book_bc", "admin");

I have tried to to the following with no luck.

$result = @mysql_pconnect("192.168.0.2", "book_bc", "admin");

Can I do this or is there another way to do this by ip or domain name.

Is the mysql port open on the machine that runs the DB?

you know that is a good questions I am not sure!

How can i tell.

I run RH8.0.

should generate output similar to

Trying 192.168.0.2..
Connected to 192.168.0.2
Escape character is '^]'.
(
3.23.54et9_R]\8,

instead of saying connection refused.

You may also want to try using the mysql client on your apache box to see if it can get to the mysql box

and see what it says.

Well I tried to telnet with the port however I get connection refused because the machine activly refused it.

So i guess that is a no that the mysql port is not accepting calls

I will try to open that port any suggestions

Thanks for all your help.

I tried to open the port with the following

iptables -A INPUT --destination-port 3306 -i ppp0 -j ACCEPT

However it does not work it comes back unknown arg --3306

Am i doing this right, well I know I am not.

Any help would be great!

Is the MySQL box running RH 8.0 too? In that case you may need to login as root to this box and reconfigure the iptables rules so as to allow incoming connections to TCP port 3306 ( mysql default port ).

Something along the lines of
should suffice, but only if RH is not declaring a custom chain and doing complex things with it. You may post your current rules after listing them out using
iptables -L


I suggest reading
http://www.netfilter.org/documentati...ing-HOWTO.html
http://www.justlinux.com/nhf/Securit...es_Basics.html
http://www.netfilter.org/documentati...-tutorial.html

in that order if you want to delve into the underpinnings of packet filtering in general and iptables in particular.

I would take the -i ppp0 away since it stands for 'over interface ppp0'. But that doesnt guarantee it. Try posting the complete listing of rules using iptables -L

I did this

iptables -I INPUT -p tcp --source 192.168.0/24 --destination-port mysql -j ACCEPT

but i try to connect via telnet

telnet (ip address) 3306

and I get activly refused

i even restarted the ipchains

iptables -L shows the following

Chain INPUT (policy ACCEPT)
target prot opt source destination
RH-Lokkit-0-50-INPUT all -- anywhere anywhere

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain RH-Lokkit-0-50-INPUT (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp dpt:smtp flags:S
YN,RST,ACK/SYN
ACCEPT tcp -- anywhere anywhere tcp dpt:http flags:S
YN,RST,ACK/SYN
ACCEPT tcp -- anywhere anywhere tcp dpt:ftp flags:SY
N,RST,ACK/SYN
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh flags:SY
N,RST,ACK/SYN
ACCEPT tcp -- anywhere anywhere tcp dpt:telnet flags
:SYN,RST,ACK/SYN
ACCEPT udp -- anywhere anywhere udp spts:bootps:boot
pc dpts:bootps:bootpc
ACCEPT udp -- anywhere anywhere udp spts:bootps:boot
pc dpts:bootps:bootpc
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
REJECT tcp -- anywhere anywhere tcp dpts:0:1023 flag
s:SYN,RST,ACK/SYN reject-with icmp-port-unreachable
REJECT tcp -- anywhere anywhere tcp dpt:nfs flags:SY
N,RST,ACK/SYN reject-with icmp-port-unreachable
REJECT udp -- anywhere anywhere udp dpts:0:1023 reje
ct-with icmp-port-unreachable
REJECT udp -- anywhere anywhere udp dpt:nfs reject-w
ith icmp-port-unreachable
REJECT tcp -- anywhere anywhere tcp dpts:x11:6009 fl
ags:SYN,RST,ACK/SYN reject-with icmp-port-unreachable
REJECT tcp -- anywhere anywhere tcp dpt:xfs flags:SY
N,RST,ACK/SYN reject-with icmp-port-unreachable

Add the following line to /etc/sysconfig/iptables as root under the line that looks like '-A INPUT -j RH-Lokkit-0-50-INPUT'

now do /sbin/iptables restart. You should be fine if you can telnet it from the other box now.

1