From owner-freebsd-questions  Wed May 30  6:27:19 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from clmboh1-smtp3.columbus.rr.com (clmboh1-smtp3.columbus.rr.com [65.24.0.112])
	by hub.freebsd.org (Postfix) with ESMTP id C7DCC37B424
	for <freebsd-questions@freebsd.org>; Wed, 30 May 2001 06:27:11 -0700 (PDT)
	(envelope-from wmoran@iowna.com)
Received: from iowna.com (dhcp065-024-023-038.columbus.rr.com [65.24.23.38])
	by clmboh1-smtp3.columbus.rr.com (8.11.2/8.11.2) with ESMTP id f4UDO0k07971;
	Wed, 30 May 2001 09:24:00 -0400 (EDT)
Message-ID: <3B14F4DC.322146BE@iowna.com>
Date: Wed, 30 May 2001 09:25:48 -0400
From: Bill Moran <wmoran@iowna.com>
X-Mailer: Mozilla 4.76 [en] (X11; U; FreeBSD 4.3-STABLE i386)
X-Accept-Language: en
MIME-Version: 1.0
To: Ryan Masse <mail@max-info.net>
Cc: FreeBSD-Questions <freebsd-questions@freebsd.org>
Subject: Re: mysql tcp connection
References: <3B144374.996414E9@optonline.net> <3B144ED5.F86EE61B@iowna.com> <3B148021.60CB7680@optonline.net> <00a901c0e8c7$d05a7920$fd00a8c0@Home> <3B14855C.E998927E@iowna.com> <00de01c0e8ca$56b4c820$fd00a8c0@Home>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

Ryan Masse wrote:
> 
> security wise i had removed all anonymous users from the user table.

The "anonymous" users that are included by default have no permissions
on anything. They are there so that someone who logs in anonymously has
no rights to anything. By removing them you may have given anonymous
users indeterminate rights (depending on exactly what you removed) Was
that your intent?

> the '%'
> was for test purposes. A more defined user@'ip/subnet' will be implemented
> once the remote connection has proven itself.

For testing purposes, you should test your security as well.

-Bill

-- 
If a bird in the hand
is worth two in the bush,
then what can I get for
two hands in the bush?

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message