Are you trying to figure out UFW MySQL?

MySQL services can be easily implemented using UFW. To do so, we need to open the port 3306.

At Bobcares, we often receive requests to enable MySQL using UFW as part of our Server Management Services.

Today, let’s discuss this in detail and see how our Support Engineers do it easily.

More about UFW MySQL

As we all know, Linux is best known for its security. And, iptables contribute it’s best to enhance this security.

But, complex iptables made users prefer a much simpler front end for it.

And, Uncomplicated Firewall or UFW is a front-end for iptables that is best suitable for host-based firewalls.

It provides a framework for managing Netfilter and a command-line interface for working with the firewall.

To connect to the MySQL database, we need to open the port 3306. MySQL listens for client connections on port 3306.

So, let’s now check how we do this in UFW.

How we enable MySQL in UFW

Recently, one of our customers approached us with a query related to UFW. He has a UFW firewall installed but not being able to connect to MySQL.

Our Support Engineers checked and found that the port 3306 was not open the firewall.

So, if we need to connect to the MySQL database server, we need to allow the traffic in the firewall.

For that, we need to open the port 3306. We can open the port by using the port number or with service name.

ufw allow 3306

or

ufw allow mysql

Allow MySQL from Specific IP Address or Subnet

To allow incoming MySQL connections from a specific IP address or subnet, we use the command,

ufw allow from IP/subnet to any port 3306

Here, we replace the IP/subnet using the required IP address or the entire subnet that is to be allowed.

For instance, if we want to allow the entire subnet 1x.2x.1x.0/24, we use the command as,

ufw allow from 1x.2x.1x.0/24 to any port 3306

Allow MySQL to Specific Network Interface

Similarly, sometimes we require to allow MySQL connections to a specific network interface.

In such cases, we use the following command,

ufw allow in on network_interface to any port 3306

This will help to have MySQL connections to the private network interface.

ufw allow in on eth1 to any port 3306

For instance, if we want to allow a private network interface eth1. We use the command

[Need more assistance to enable MySQL in UFW?- We’ll help you.]

Conclusion

In short, enabling MySQL in UFW includes opening the port 3306. In today’s article, we discussed how our Support Engineers allow MySQL connection for a specific IP address and interface.