3 ms·

I would highly recommend that (on the master) you only accept traffic to 3306/TCP from the slave and not 0/0. -A INPUT -i eth0 -p tcp -s 10.1.1.1/32 --dport

I would highly recommend that (on the master) you only accept traffic to 3306/TCP from the slave and not 0/0. -A INPUT -i eth0 -p tcp -s 10.1.1.1/32 --dport 3306 -j ACCEPT Replace 10.1.1.1 with your slave's IP address.

ItsWinterHello 13y ago
@jlgaddis Do I continue to use the rules mentioned in the original post (i.e. generic rules) on the Slave db and just add the rule you suggested to the master? Do I open up port 3306 at all on the slave for the master to speak with the slave? Sorry for my ignorance on this...