mysql只允许ssh,修改SSH默认端口,MySQL设置只能本机访问（Linux） | CN-SEC 中文网

摘要

[[email protected] mysql]# 作者: Luan

Host 'lu4n.com' resolved to 162.159.210.53. Connecting to 162.159.210.53:22... Connection established. To escape to local shell, press 'Ctrl+Alt+]'. Last failed login: Tue Mar 28 22:06:54 CST 2017 from host-76-203.pool.hiperkom.hu on ssh:notty There were 1091 failed login attempts since the last successful login. Last login: Tue Mar 28 19:20:38 2017 from 223.150.114.189 [[email protected] ~]# cd /etc/ssh [[email protected] ssh]# ls moduli ssh_config ssh_host_ecdsa_key ssh_host_ecdsa_key.pub ssh_host_ed25519_key ssh_host_ed25519_key.pub ssh_host_rsa_key ssh_host_rsa_key.pub sshd_config [[email protected] ssh]# nano sshd_config 找到#Port 22,改成Port 2222 [[email protected] ssh]# service sshd restart Redirecting to /bin/systemctl restart sshd.service [[email protected] ssh]# netstat -an Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:1080 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN tcp 0 248 162.159.210.53:22 223.150.114.189:13844 ESTABLISHED tcp 0 0 162.159.210.53:22 108.171.107.245:43286 TIME_WAIT tcp 0 0 162.159.210.53:22 108.171.107.245:43287 TIME_WAIT tcp 0 0 162.159.210.53:1080 122.224.153.122:13064 ESTABLISHED tcp 0 0 162.159.210.53:1080 122.224.153.122:12909 ESTABLISHED tcp 0 0 162.159.210.53:1080 122.224.153.122:49067 ESTABLISHED tcp 0 0 162.159.210.53:1080 122.224.153.122:22977 ESTABLISHED [[email protected] ssh]# cd /etc/mysql -bash: cd: /etc/mysql: No such file or directory [[email protected] ssh]# cd /usr/local/mysql [[email protected] mysql]# ls COPYING INSTALL-BINARY README bin data docs include lib man mysql-test scripts share sql-bench support-files var [[email protected] mysql]# find / -name my.cnf /usr/local/mysql/mysql-test/suite/federated/my.cnf /usr/local/mysql/mysql-test/suite/rpl/my.cnf /etc/my.cnf [[email protected] mysql]# nano /etc/my.cnf 添加一行: bind-address = 127.0.0.1 [[email protected] mysql]# service mysqld restart Redirecting to /bin/systemctl restart mysqld.service Failed to restart mysqld.service: Unit not found. [[email protected] mysql]# service mysql restart Shutting down MySQL.. SUCCESS! Starting MySQL.. SUCCESS! [[email protected] mysql]# netstat -an Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:1080 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:2222 0.0.0.0:* LISTEN tcp 0 248 162.159.210.53:22 223.150.114.189:13844 ESTABLISHED tcp 0 1 162.159.210.53:80 223.150.114.189:15433 LAST_ACK tcp 0 0 162.159.210.53:80 223.150.114.189:15431 ESTABLISHED tcp 0 0 162.159.210.53:80 223.150.114.189:15426 ESTABLISHED tcp 0 0 162.159.210.53:1080 122.224.153.122:49067 ESTABLISHED tcp 0 0 162.159.210.53:1080 122.224.153.122:13064 ESTABLISHED tcp 0 0 162.159.210.53:1080 122.224.153.122:12909 ESTABLISHED tcp 0 0 162.159.210.53:1080 122.224.153.122:22977 ESTABLISHED

作者: Luan