[SOLVED] MySQL, skip-networking

qrange · 04-04-2013, 06:09 AM

mysql config says:

Quote:

"Instead of skip-networking the default is now to listen only on
localhost which is more compatible and is not less secure."

is it really as secure as using only pipes?

acid_kewpie · 04-04-2013, 06:46 AM

I don't see any reason why it's not secure. Opening a pipe vs a network connection that is only reachable from within the box? Seems fine by me.

qrange · 04-05-2013, 04:41 AM

ok, thanks. I was worried that somehow attacker could use "IP address spoofing" so that packet has localhost as source address.

acid_kewpie · 04-05-2013, 04:45 AM

well the spoof would be the source, the destination would still need to be to the localhost address, and no router would ever ropute somethign to 127.0.0.1, it would just make no sense.