CSF question (mostly) - Why open 3306 for outbound connections? PCI compliance issue.

jols

Well-Known Member
Mar 13, 2004
1,110
3
168
I notice that most have CSF configured for TCP_OUT = 3306 as we do. But now this has become a PCI compliance issue. So I am wondering about the logic in opening the MySQL port for outbound traffic? Is this something which is routinely used by the cPanel/WHM system?
 

Infopro

Well-Known Member
May 20, 2003
17,113
513
613
Pennsylvania
cPanel Access Level
Root Administrator
Twitter
Re: CSF question (mostly) - Why open 3306 for outbound connections? PCI compliance is

Not at all if you don't need it. I can't say for sure but I don't think CSF comes with this port open by default, either.
This port is not open on any of my servers.
 

cPanelTristan

Quality Assurance Analyst
Staff member
Oct 2, 2010
7,607
40
248
somewhere over the rainbow
cPanel Access Level
Root Administrator
Re: CSF question (mostly) - Why open 3306 for outbound connections? PCI compliance is

CSF is a third party product produced by another company, which has a forum at this location:

ConfigServer Scripts Forum

It might be better to post on that location to ask this question to see if it is opened by default or not in any way.
 

jols

Well-Known Member
Mar 13, 2004
1,110
3
168
Re: CSF question (mostly) - Why open 3306 for outbound connections? PCI compliance is

Thanks Tristan. I agree. They are in the UK and are not currently available. I needed a quick answer for this one.