我有问题，我不能达到3306端口（MySQL），即使我在iptables设置它。 我该如何解决这个问题？
root@vps191532:# iptables-save # Generated by iptables-save v1.4.21 on Thu Oct 22 20:42:38 2015 *filter :INPUT ACCEPT [695:36753] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [469:37083] -A INPUT -p tcp -m tcp --dport 3306 -m state --state NEW,ESTABLISHED -j ACCEPT -A OUTPUT -p tcp -m tcp --sport 3306 -m state --state ESTABLISHED -j ACCEPT COMMIT # Completed on Thu Oct 22 20:42:38 2015 root@vps191532:# netstat -lnpa | grep mysql tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN 8960/mysqld unix 2 [ ACC ] STREAM LISTENING 42152 8960/mysqld /var/run/mysqld/mysqld.sock C:\Users>telnet 149.XXX.51.XXX 3306 Connecting To 149.XXX.51.XXX...Could not open connection to the host, on port 3306: Connect failed root@vps191532:# iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp dpt:mysql state NEW,ESTABLISHED Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp spt:mysql state ESTABLISHED
问题是你的MySQL安装只听取127.0.0.1地址（也被称为非常舒适的地方叫localhost）的连接。 基本上，只需编辑/etc/mysql/my.cnf文件并find该行：
bind-address = 127.0.0.1
只需将其更改为：
bind-address = 0.0.0.0
并重新启动您的MySQL服务：
service mysql restart
只要记住，MySQL将开始在所有地址进行侦听，所以只需调整它以适应您的需求，并添加防火墙规则来阻止不需要的请求…
氰！