ConfigServer Community Forum

I can confirm that taking the output of the command and dropping it directly into csf.allow works. I was just wondering if there is a supported way of having this running in csf instead of via an external means, and a way that doesn't require a csf -r every minute or two if I have to pipe the output...

Well, I realized why 3306 was still open, it was because of the 3000:3500 wild card in our config. I changed that to 3000:3305,3307:3500. The port is now properly closed, but that line still doesn't allow the IP that I allowed via the cPanel interface into cPanel, even after a restart. Thoughts?

It's vital that we offer 3306 remote connection as a shared hosting provider, but at the same time, we expose ourselves to constant attacks which seem to have intensified recently. As per forums.cpanel-net/f354/do-you-allow-remote-mysql-access-157645.html (renamed forums.cpanel-net as the forum woul...