At 4/6/01 04:14 PM -0700, you wrote:
The difference here is that any connection made to the mysql socket will be made internally (localhost) There will be no outside application connecting to my DB. Because of this I see no reason for this port to open. I am missing something ?
Yes, you are. :)The "mysql socket" you mention on the first line *is* the port. The port is the only way MySQL accepts connections, and that's how most things work on a Linux box. Therefore it *must* be open as someone replied.
However, if no one on the outside needs to connect to it, then you should use several layers of security (MySQL and ipchains, for example) to ensure that in fact no one can connect to the port except for localhost. Read the docs for more info.
hosts.deny is not going to do anything for you; it only controls those daemons run from inetd or xinetd (ftp, telnet, finger, pop3, imap, etc.).
-- Rodolfo J. Paiz rpaiz@xxxxxxxxxxxxxx