Groups | Search | Server Info | Login | Register
Groups > comp.databases.mysql > #591
| Path | csiph.com!x330-a1.tempe.blueboxinc.net!usenet.pasdenom.info!news.albasani.net!eternal-september.org!feeder.eternal-september.org!.POSTED!not-for-mail |
|---|---|
| From | "Peter H. Coffin" <hellsop@ninehells.com> |
| Newsgroups | comp.databases.mysql |
| Subject | Re: modify my.cnf |
| Date | Fri, 22 Apr 2011 08:19:53 -0500 |
| Organization | A noiseless patient Spider |
| Lines | 27 |
| Message-ID | <slrnir303p.2mh.hellsop@nibelheim.ninehells.com> (permalink) |
| References | <4cde199c-2021-4d9e-96ec-8947372893c2@a21g2000prj.googlegroups.com> <slrnir1sdf.2mh.hellsop@nibelheim.ninehells.com> <iornmg$uhi$2@dont-email.me> |
| Mime-Version | 1.0 |
| Content-Type | text/plain; charset=us-ascii |
| Content-Transfer-Encoding | 7bit |
| Injection-Info | mx02.eternal-september.org; posting-host="le/2G4+BNpieVhQI6uJ2Lw"; logging-data="29540"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/bKey8q5f2eUzWQjuHTUXe" |
| User-Agent | slrn/0.9.9p1 (OpenBSD) |
| Cancel-Lock | sha1:3JC+o5jM8UC9LiYbEXp9HRjrzK8= |
| Xref | x330-a1.tempe.blueboxinc.net comp.databases.mysql:591 |
Show key headers only | View raw
On Fri, 22 Apr 2011 07:10:06 -0400, Jerry Stuckle wrote:
> On 4/21/2011 11:10 PM, Peter H. Coffin wrote:
>> The answer is remove the above line that has *anything* to do with an IP
>> address.
>>
>> You almost had it in your grasp this time!
>>
>
> Yea, but then *anyone* can get access to her database. Not a good idea
> if you want to restrict that access, i.e. for security reasons, which is
> what I think she's doing.
It's possible (and, yes, a very good idea), but it wasn't in the
original list of conditions. In fact, it was specifically mentioned that
outside access was something desired. But we both know that if you want
to limit where a connection *comes from*, that's a firewall issue or a
'user'@'address issue, not a my.cnf issue. Further, as shown, binding to
a specific external address would make that external access break when
the IP address eventually and inevitably changes. And that leaves us
with pretty much one solvable problem: IP address changed, external
access went away, tears were shed and teeth gnashed.
--
For their next act, they'll no doubt be buying a firewall running under
NT, which makes about as much sense as building a prison out of
meringue.
-- Tanuki
Back to comp.databases.mysql | Previous | Next — Previous in thread | Next in thread | Find similar
modify my.cnf jrough <janis.rough@gmail.com> - 2011-04-21 18:07 -0700
Re: modify my.cnf "Peter H. Coffin" <hellsop@ninehells.com> - 2011-04-21 22:10 -0500
Re: modify my.cnf Jerry Stuckle <jstucklex@attglobal.net> - 2011-04-22 07:10 -0400
Re: modify my.cnf "Peter H. Coffin" <hellsop@ninehells.com> - 2011-04-22 08:19 -0500
Re: modify my.cnf jrough <janis.rough@gmail.com> - 2011-04-22 07:50 -0700
Re: modify my.cnf Jerry Stuckle <jstucklex@attglobal.net> - 2011-04-22 11:12 -0400
Re: modify my.cnf "Peter H. Coffin" <hellsop@ninehells.com> - 2011-04-22 14:47 -0500
Re: modify my.cnf jrough <janis.rough@gmail.com> - 2011-04-23 09:15 -0700
csiph-web