MySQL Security Risk?

This is a discussion on MySQL Security Risk? within the Linux Security forums, part of the System Security and Security Related category; Christopher Browne wrote: > Quoth Nuno Paquete <nmp@ispgaya.pt>: >> How woul you create a ssh ...


Go Back   Usenet Forums > System Security and Security Related > Linux Security

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #11 (permalink)  
Old 09-01-2004
Nuno Paquete
 
Posts: n/a
Default Re: MySQL Security Risk?

Christopher Browne wrote:

> Quoth Nuno Paquete <nmp@ispgaya.pt>:
>> How woul you create a ssh tunnel?
>> With stunnel?
>> Using a VPN?

>
> No, I'd use ssh.


How do you do it?
You can use Putty to connect securely to the server using SSH protocol, but
how can you create a tunnel that will be used by MySql connections? I mean,
how can you connect to 3306 port within a secure tunnel?

Regards,
Nuno Paquete
Reply With Quote
  #12 (permalink)  
Old 09-01-2004
ynotssor
 
Posts: n/a
Default Re: MySQL Security Risk?

"Nuno Paquete" <nmp@ispgaya.pt> wrote in message
news:4135d605$0$1830$a729d347@news.telepac.pt

>> No, I'd use ssh.

>
> How do you do it?
> You can use Putty to connect securely to the server using SSH
> protocol, but how can you create a tunnel that will be used by MySql
> connections? I mean, how can you connect to 3306 port within a secure
> tunnel?


-p port

see the man page

--
use hotmail for email replies
Reply With Quote
  #13 (permalink)  
Old 09-01-2004
Jose M.Herrera M.
 
Posts: n/a
Default Re: MySQL Security Risk?

dd <dd@ndirect.co.uk> wrote:
> How about locking down mysql to localhost then running PhpMyAdmin


> (Allowing clients to use a web interface which connects to locahost )


For more security, use ssl.

Bye!

--
.............................................
Jose Miguel Herrera M. - User #246070 counter.li.org
Est.Ing.Civil Informatica - UTFSM
Valparaiso, Chile - http://www.inf.utfsm.cl/~jherrera
Reply With Quote
  #14 (permalink)  
Old 09-02-2004
Christopher Browne
 
Posts: n/a
Default Re: MySQL Security Risk?

After a long battle with technology, Nuno Paquete <nmp@ispgaya.pt>, an earthling, wrote:
> Christopher Browne wrote:
>
>> Quoth Nuno Paquete <nmp@ispgaya.pt>:
>>> How woul you create a ssh tunnel?
>>> With stunnel?
>>> Using a VPN?

>>
>> No, I'd use ssh.

>
> How do you do it?
> You can use Putty to connect securely to the server using SSH protocol, but
> how can you create a tunnel that will be used by MySql connections? I mean,
> how can you connect to 3306 port within a secure tunnel?


This is well-documented in numerous places including here
<http://www.brandonhutchinson.com/ssh_tunnelling.html>

The relevant SSH options are -L, -R, and possible -f.
--
If this was helpful, <http://svcs.affero.net/rm.php?r=cbbrowne> rate me
http://www3.sympatico.ca/cbbrowne/sap.html
"In most countries selling harmful things like drugs is punishable.
Then how come people can sell Microsoft software and go unpunished?"
-- <hasku@rost.abo.fi> Hasse Skrifvars
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT +1. The time now is 01:39 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0