2 edited body
source | link

I suppose the usual OS methods (including fail2ban if remote ssh admin is required), then block all external access to the mysqlMySQL port, or allow a whitelist to connect if absolutely necessary. Set a password for the mysqladmin user.

After that, the mysqladmin user should only be allowed to connect from localhost and should be the only user granted any privileges via the 'user' table - all other users denied access by default (i.e. in the user table) but given specific grants to individual databases.

Note that you should not expose mysqlMySQL directly on the internet. If you must have remote data access use a vpnVPN (e.g. stunnel with client verification).

I suppose the usual OS methods (including fail2ban if remote ssh admin is required), then block all external access to the mysql port, or allow a whitelist to connect if absolutely necessary. Set a password for the mysqladmin user.

After that, the mysqladmin user should only be allowed to connect from localhost and should be the only user granted any privileges via the 'user' table - all other users denied access by default (i.e. in the user table) but given specific grants to individual databases.

Note that you should not expose mysql directly on the internet. If you must have remote data access use a vpn (e.g. stunnel with client verification).

I suppose the usual OS methods (including fail2ban if remote ssh admin is required), then block all external access to the MySQL port, or allow a whitelist to connect if absolutely necessary. Set a password for the mysqladmin user.

After that, the mysqladmin user should only be allowed to connect from localhost and should be the only user granted any privileges via the 'user' table - all other users denied access by default (i.e. in the user table) but given specific grants to individual databases.

Note that you should not expose MySQL directly on the internet. If you must have remote data access use a VPN (e.g. stunnel with client verification).

1
source | link

I suppose the usual OS methods (including fail2ban if remote ssh admin is required), then block all external access to the mysql port, or allow a whitelist to connect if absolutely necessary. Set a password for the mysqladmin user.

After that, the mysqladmin user should only be allowed to connect from localhost and should be the only user granted any privileges via the 'user' table - all other users denied access by default (i.e. in the user table) but given specific grants to individual databases.

Note that you should not expose mysql directly on the internet. If you must have remote data access use a vpn (e.g. stunnel with client verification).