1

I'm trying to allow remote traffic to my mysql server. I changed my bind address in my mysqld.cnf to 0.0.0.0, and ran sudo ufw allow 3306/tcp but I don't think my port 3306 is allowing traffic.

Amazon EC2 security rule allowing 3306 access

I'm trying to access the mysql server to store dev, staging and production.

6
  • running it on amazon ec2 instance should be good. ill add a picture.
    – Jay
    Jun 19, 2018 at 3:28
  • Did you restart the mysql service after changing the configuration? How did you check whether it is listening? Jun 19, 2018 at 3:44
  • i did. and I ran netstat -l
    – Jay
    Jun 19, 2018 at 4:01
  • Check if you not have --skip-networking option when mysql daemon starts. How to check: ps -ef | grep mysql and check used options. What you got, when run ss -tnpl | grep 3306?
    – mariaczi
    Jun 19, 2018 at 6:39
  • ps -ef | grep mysql returns 7290 7273 0 14:02 pts/0 00:00:00 grep --color=auto mysql ss -tnpl | grep 3306 doesn't return anything
    – Jay
    Jun 19, 2018 at 14:04

1 Answer 1

1

Do this test from different sites in your infrastructure.

Install nmap like so,

sudo apt-get install nmap

and then try to scan the database server like so:

From localhost/same machine do

sudo nmap -sS 127.0.0.1

From the same network/other machine close by do (e.G.)

sudo nmap -sS 192.168.X.X

From the Internet do (e.G.)

 sudo nmap -sS 80.34.X.X 

If the first and second test go well, you have a problem with your router. This problem is then not Ubuntu-related anymore, but a problem with the router you use to connect to the internet.

If the first test fails, your port is completly closed and you have to work on your mysql conf again.

If the first succeeds and the second one fails, recheck that mysql really listens to 3306. Do a

 sudo netstat -tlpn

Check that 0.0.0.0 is the source ip for port 3306/tcp. If that is the case you will have to recheck the settings with ufw. Disable the ufw for testing, to see if it makes a difference.

2
  • Its an amazon ec2 instance. I don't control the router, but I can set up security rules. nor do I have other devices on the same network.
    – Jay
    Jun 19, 2018 at 16:12
  • Oh, so you have no neighbouring machines? thats too bad. What happens, if you use nmap from your home (from the internet). Is there no port open? It should have ssh open, so you can connect. Does it list any other ports? Did you check netstat to see if mysql is set to 0.0.0.0?
    – s1mmel
    Jun 20, 2018 at 7:57

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .