Portal Home > Knowledgebase > Articles Database > Safe to open up port 3306 outgoing?
Posted by craigedmonds, 05-10-2012, 09:50 AM Hi, I have a client who is running a script which connects to a remote mysql server. He was telling me that the connection was being blocked. So I have allowed port 3306 outgoing with CSF firewall and now the connection works. Is there any security issue with doing this?
Posted by gigatux, 05-10-2012, 09:56 AM A port is just a port at the end of the day. 3306 may be used for remote MySQL, but anything can still use that port. If you wanted to be super-safe, you could add some iptables rules to only allow 3306 out on a specific IP address, but it's not too much of a risk to allow this. Note that if there is an awful lot of data transfer on this connection, it probably won't be included in any bandwidth accounting.
Add to Favourites Print this Article