I am trying to allow a particular IP address to access port 3306. I have removed 3306 from the TCP_IN list in csf configuration, and am trying to add the IP address to the csf.allow file. I have tried the following:
d=3306:s=11.22.33.44
d=3306|s=11.22.33.44
tcp:in:d=3306:s=11.22.33.44
tcp|in|d=3306|s=11.22.33.44
...where 11.22.33.44 is the IP address I want to allow, but after restarting the firewall, it still won't allow that IP to connect. If the firewall is disabled, it can connect ok, so it is not due to any other network issues. What might I be doing wrong?
TIA.
Cannot allow access to port by IP address
-
hinterglem
- Junior Member
- Posts: 2
- Joined: 14 Aug 2013, 16:39
-
hinterglem
- Junior Member
- Posts: 2
- Joined: 14 Aug 2013, 16:39
Re: Cannot allow access to port by IP address
It turns out only one remote host was affected by this problem - others were ok. I still don't know why that one host cannot connect despite being in the allow file and not being in the deny file, but it is not a major issue as I was only using that host for testing purposes anyway.