Path: csiph.com!x330-a1.tempe.blueboxinc.net!usenet.pasdenom.info!news.albasani.net!eternal-september.org!feeder.eternal-september.org!.POSTED!not-for-mail From: "Peter H. Coffin" Newsgroups: comp.databases.mysql Subject: Re: modify my.cnf Date: Fri, 22 Apr 2011 08:19:53 -0500 Organization: A noiseless patient Spider Lines: 27 Message-ID: References: <4cde199c-2021-4d9e-96ec-8947372893c2@a21g2000prj.googlegroups.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Injection-Info: mx02.eternal-september.org; posting-host="le/2G4+BNpieVhQI6uJ2Lw"; logging-data="29540"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/bKey8q5f2eUzWQjuHTUXe" User-Agent: slrn/0.9.9p1 (OpenBSD) Cancel-Lock: sha1:3JC+o5jM8UC9LiYbEXp9HRjrzK8= Xref: x330-a1.tempe.blueboxinc.net comp.databases.mysql:591 On Fri, 22 Apr 2011 07:10:06 -0400, Jerry Stuckle wrote: > On 4/21/2011 11:10 PM, Peter H. Coffin wrote: >> The answer is remove the above line that has *anything* to do with an IP >> address. >> >> You almost had it in your grasp this time! >> > > Yea, but then *anyone* can get access to her database. Not a good idea > if you want to restrict that access, i.e. for security reasons, which is > what I think she's doing. It's possible (and, yes, a very good idea), but it wasn't in the original list of conditions. In fact, it was specifically mentioned that outside access was something desired. But we both know that if you want to limit where a connection *comes from*, that's a firewall issue or a 'user'@'address issue, not a my.cnf issue. Further, as shown, binding to a specific external address would make that external access break when the IP address eventually and inevitably changes. And that leaves us with pretty much one solvable problem: IP address changed, external access went away, tears were shed and teeth gnashed. -- For their next act, they'll no doubt be buying a firewall running under NT, which makes about as much sense as building a prison out of meringue. -- Tanuki