|
Running the Mediawiki 1.17.0 stack natively on Linux, I found out that MySQL listens on all IP addresses by default. Since this is not needed for normal operations, I have added the following configuration item to the [mysqld] section in the my.cnf file : bind-address=127.0.0.1 Might I suggest this as a default? |
|
Thanks for your suggestion. By default you can not connect to the MYSQL database from an external machine. Take a look at http://wiki.bitnami.org/Components/MySQL#How_to_connect_to_the_MySQL_database_from_a_different_machine.3f. Also Virtual Machines and AMIs have a firewall running that do not let to connect to the database. In any case this is an improvement and we will considerer to include it. 1
Oh I'm aware that the MySQLd will not accept external connections but if you are in a corporate environment like I am and you have regular Vulnerability Scans running, having that port and its banner listed as "available" all over the place is far from ideal :) Thanks for the update.
(27 Sep '11, 12:56)
Kint
|