MySQL binding warning cannot be fixed

[jagonoja]

I am trying to address the warnings of the security advisor, but I cannot fix this one:

The MySQL service is currently configured to listen on all interfaces: (bind-address=*)

In my /etc/ folder there are two MySQL conf files: my.cnf and my.cnf.mysqlup.8.0 (which appeared after updating MySQL to version 8).

I have edited both so that they contain, near the end, the line bind-address=127.0.0.1

Yet, after restarting MySQL a few times, the warning of the Security Advisor doesn't disappear.

What am I doing wrong?

 

[andrew.n]

what does "netstat -ntpln" show?

 

[jagonoja]

sorry I made a mistake, reply follows

 

[jagonoja]

what does "netstat -ntpln" show?


Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:2077 0.0.0.0:* LISTEN 521/cpdavd - accept
tcp 0 0 0.0.0.0:2078 0.0.0.0:* LISTEN 521/cpdavd - accept
tcp 0 0 0.0.0.0:2079 0.0.0.0:* LISTEN 521/cpdavd - accept
tcp 0 0 0.0.0.0:2080 0.0.0.0:* LISTEN 521/cpdavd - accept
tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN 403/dovecot
tcp 0 0 0.0.0.0:2082 0.0.0.0:* LISTEN 417/cpsrvd (SSL) -
tcp 0 0 127.0.0.1:579 0.0.0.0:* LISTEN 527/cPhulkd - proce
tcp 0 0 0.0.0.0:2083 0.0.0.0:* LISTEN 417/cpsrvd (SSL) -
tcp 0 0 0.0.0.0:995 0.0.0.0:* LISTEN 403/dovecot
tcp 0 0 0.0.0.0:2086 0.0.0.0:* LISTEN 417/cpsrvd (SSL) -
tcp 0 0 0.0.0.0:2087 0.0.0.0:* LISTEN 417/cpsrvd (SSL) -
tcp 0 0 0.0.0.0:2090 0.0.0.0:* LISTEN 521/cpdavd - accept
tcp 0 0 0.0.0.0:2091 0.0.0.0:* LISTEN 521/cpdavd - accept
tcp 0 0 0.0.0.0:587 0.0.0.0:* LISTEN 447/exim
tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN 403/dovecot
tcp 0 0 127.0.0.1:783 0.0.0.0:* LISTEN 19463/perl
tcp 0 0 0.0.0.0:2095 0.0.0.0:* LISTEN 417/cpsrvd (SSL) -
tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN 403/dovecot
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 8863/httpd
tcp 0 0 0.0.0.0:2096 0.0.0.0:* LISTEN 417/cpsrvd (SSL) -
tcp 0 0 0.0.0.0:465 0.0.0.0:* LISTEN 447/exim
tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 7588/pure-ftpd (SER
tcp 0 0 [IP NUMBER OF THE SERVER]:53 0.0.0.0:* LISTEN 569/named
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 569/named
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 6959/sshd
tcp 0 0 127.0.0.1:953 0.0.0.0:* LISTEN 569/named
tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 447/exim
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 8863/httpd
tcp6 0 0 :::993 :::* LISTEN 403/dovecot
tcp6 0 0 :::995 :::* LISTEN 403/dovecot
tcp6 0 0 :::3306 :::* LISTEN 20767/mysqld
tcp6 0 0 :::587 :::* LISTEN 447/exim
tcp6 0 0 :::110 :::* LISTEN 403/dovecot
tcp6 0 0 :::143 :::* LISTEN 403/dovecot
tcp6 0 0 :::80 :::* LISTEN 8863/httpd
tcp6 0 0 :::465 :::* LISTEN 447/exim
tcp6 0 0 :::21 :::* LISTEN 7588/pure-ftpd (SER
tcp6 0 0 :::22 :::* LISTEN 6959/sshd
tcp6 0 0 :::25 :::* LISTEN 447/exim
tcp6 0 0 :::443 :::* LISTEN 8863/httpd


MySQL port is 3306 but I don't see it here. Not sure what that means...

 

[quietFinn]

I have edited both so that they contain, near the end, the line bind-address=127.0.0.1

Is that under the [mysqld] section?
You say "near the end" so it might be under another section.

File my.cnf.mysqlup.8.0 has no effect whatsoever,

 

[jagonoja]

Is that under the [mysqld] section?
You say "near the end" so it might be under another section.

File my.cnf.mysqlup.8.0 has no effect whatsoever,

Dang, I didn't know the sections mattered. I moved it under mysqld and it works now. The warning has disappeared. Thanks!

 

[andrew.n]

Good job