As I understand it, commenting our the bind-address is the same as setting it as 0.0.0.0
As regards iptables, you are 100% right. Though this takes a little explanation for any changes need to be saved else will be lost on reboot.
I am making a little tutorial on this and will add the link when I have it right. I imagine that cPanel do all this automatically. Thus any feature request that checks the bind-address / or sets the bind-address at the same time as allowing a remote connection should IMO add a specific rule to the iptable and block all others.
Sure â if you havenât already, pop a feature request into the Bugs and Issues tracker (the link is below). Having Virtualmin be a little more âDWIMâ may not be a bad idea, but weâll see what Jamie thinks
-Eric
Yeah, I just wanted to chip in that I am having trouble with this my hoster, too.
I have been âspoiledâ by cPanel, where I just select Remote MySQL, and put in my IP from DHCP server. When the DHCP lease expires, I just update the setting. Requiring that anyone who accessed a database remotely have a static IP sounds kind of draconian to me. A zillion cPanel providers feel that itâs not an unreasonable security risk to allow their users to enter arbitrary IP ranges for access, apparently, including %.%.%.%, but my host has not enabled the Remote Access tab- either he disagrees or just hasnât been asked to enable it.
This could be a deal breaker for me, if I donât get this function. I guess I just have to ask my host about the feature?
Yeah, ratchet up the DWIM, for sure - just make it work.
There is another acronymâŠDWIAUT- Do What I Am Used To that applies, too, as you try to drag people over from other panels.
The âfour step planâ from velvetpixel above wasnât necessary for me - simply adding the remote IP I want to allow access using Virtualmin/Edit Databases/Remote Hosts did all that (Virtualmin 3.97.gpl).
For me, the missing step was that you have to go to Webmin/Servers/MySQL Database Server/MySQL Server Configuration/MySQL server listening address and change it to âanyâ.
Also, donât forget to enable connections through the firewalls at both ends.
(This is not a very secure configuration for production use - at the very least, you should probably change the default port.)