Groups | Search | Server Info | Login | Register

Groups > comp.databases.mysql > #591

Re: modify my.cnf

Show all headers | View raw

On Fri, 22 Apr 2011 07:10:06 -0400, Jerry Stuckle wrote:
> On 4/21/2011 11:10 PM, Peter H. Coffin wrote:
>> The answer is remove the above line that has *anything* to do with an IP
>> address.
>>
>> You almost had it in your grasp this time!
>>
>
> Yea, but then *anyone* can get access to her database. Not a good idea 
> if you want to restrict that access, i.e. for security reasons, which is 
> what I think she's doing.

It's possible (and, yes, a very good idea), but it wasn't in the
original list of conditions. In fact, it was specifically mentioned that
outside access was something desired. But we both know that if you want
to limit where a connection *comes from*, that's a firewall issue or a
'user'@'address issue, not a my.cnf issue. Further, as shown, binding to
a specific external address would make that external access break when
the IP address eventually and inevitably changes. And that leaves us
with pretty much one solvable problem: IP address changed, external
access went away, tears were shed and teeth gnashed.

-- 
For their next act, they'll no doubt be buying a firewall running under
NT, which makes about as much sense as building a prison out of 
meringue.
              -- Tanuki

Back to comp.databases.mysql | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

modify my.cnf jrough <janis.rough@gmail.com> - 2011-04-21 18:07 -0700
  Re: modify my.cnf "Peter H. Coffin" <hellsop@ninehells.com> - 2011-04-21 22:10 -0500
    Re: modify my.cnf Jerry Stuckle <jstucklex@attglobal.net> - 2011-04-22 07:10 -0400
      Re: modify my.cnf "Peter H. Coffin" <hellsop@ninehells.com> - 2011-04-22 08:19 -0500
        Re: modify my.cnf jrough <janis.rough@gmail.com> - 2011-04-22 07:50 -0700
          Re: modify my.cnf Jerry Stuckle <jstucklex@attglobal.net> - 2011-04-22 11:12 -0400
          Re: modify my.cnf "Peter H. Coffin" <hellsop@ninehells.com> - 2011-04-22 14:47 -0500
            Re: modify my.cnf jrough <janis.rough@gmail.com> - 2011-04-23 09:15 -0700

csiph-web