CSF Firewall MySQL port (3306) is open
Csf firewall help with recommandation about sql port
Do I need to open incoming or outgoing for remote mysql?
Open port 3306 on the server


:

The TCP incoming MySQL port (3306) is open. This can pose both a security and server abuse threat since not only can hackers attempt to break into MySQL, any user can host their SQL database on your server and access it from another host and so (ab)use your server resources.

:

csf port 3306
, .

:

whitelist
I'd recommend not opening up 3306, and just whitelisting the IP's you want to connect
from in CSF this way the port stays closed, but your remote whitelisted IP's can access it.
If you are using CSF its very easy, you can do:

:
 # csf -a 111.222.333.444
This will allow the IP the ability to access any port regardless if its closed, you can also open only 3306 for a specific IP
if you prefer not to allow the IP access to ALL closed ports:

You would have to modify the file: /etc/csf/csf.allow
and add:

:
 tcp|in|d=3306|s=111.222.333.444
make sure to restart CSF

:
https://forums.cpanel.net/threads/op...ut-csf.626711/
https://forums.cpanel.net/threads/do...e-mysql.65736/
https://forums.cpanel.net/threads/op...server.593459/