Mysql – Unable to connect to MySQL through port 3306

firewallMySQLportwindows-firewall

I read the answers about 3306 from a question posted in 2009. I have the same problem, but the answers I read didn't help. Port 3306 is open, even if I stop the windows-firewall, MySQL still can't access it. MySQL is running. I've run netstat firewall xxxxxx and get these results:

3306   TCP       Enable   MySQL Server

and this from netstat -a -n:

TCP    [::]:3306              [::]:0                 LISTENING       0

(I don't understand the [::])

I do have AVG Internet Security running but not the Firewall component. How can I find out what is blocking MySQL from accessing this port? And it's not just this specific port, but any port. I've asked on the MySQL forum, but no one is replying.

Best Answer

Here is a config snippet that should be informative:

[mysqld]

# The TCP/IP Port the MySQL Server will listen on
port=3306

# default IPv6，so change to ipv4 
bind-address = 0.0.0.0

Related Solutions

Mysql – Is it safe to open port 3306 in Firewall for external MySQL Connection

Generally restricting MySQL access to an ip address is a good idea. There can be some security concerns but a good firewall should mitigate some of them. They would have to create an additional MySQL user for you since MySQL does not allow multiple hosts (unless there's a wildcard) per user. You could request multiple users, one for each host that you are connecting from or even do partial hosts (eg. %.google.com).

An alternative solution is to create a ssh tunnel from your machine so that you can connect locally.

Here's a good article on how you can create a ssh tunnel with MySQL.

http://www.howtogeek.com/howto/ubuntu/access-your-mysql-server-remotely-over-ssh/

Iptables – Cannot connect to port 3306

EDIT: I looked at your iptables output more thoroughly and notice that you have some issues there.

REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:mysql
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:mysql

You are rejecting all traffic before your rule explicitly allowing traffic to MySQL has a chance to be matched. You need to reorder those rules.

Old Answer:

It is likely that your MySQL server isn't actively listening for remote connections.

The command 'ss -ln | grep 3306' probably won't return any results.

Check your MySQL configuration file for the keywords skip-networking and bind-address. If skip-networking is present in the configuration, comment it out or remove it. Ensure bind-address is set to either 0.0.0.0 ('wildcard') or a system IP address. Restart MySQL to apply the configuration changes.

You will want to ensure you do not have any accounts that are accessible to the world with empty or trivial passwords. Restricting remote access to the MySQL port is strongly recommended in addition to MySQL user and database ACLs.

Best Answer

Related Solutions

Mysql – Is it safe to open port 3306 in Firewall for external MySQL Connection

Iptables – Cannot connect to port 3306

Related Topic