Debian Bug report logs - #351971
mysql-server: support multiple ip addresses for bind-address

Package: mysql-server; Maintainer for mysql-server is Debian MySQL Maintainers <[email protected]>; Source for mysql-server is src:mysql-8.0 (PTS, buildd, popcon).

Reported by: Andres Salomon <[email protected]>

Date: Wed, 8 Feb 2006 21:18:43 UTC

Severity: wishlist

Tags: security, upstream

Forwarded to http://bugs.mysql.com/bug.php?id=14979

Full log


Message #5 received at [email protected] (full text, mbox, reply):

Received: (at submit) by bugs.debian.org; 8 Feb 2006 21:16:21 +0000
From [email protected] Wed Feb 08 13:16:21 2006
Return-path: <[email protected]>
Received: from mouth.voxel.net
	([69.9.180.118] helo=mail.squishy.cc ident=postfix)
	by spohr.debian.org with esmtp (Exim 4.50)
	id 1F6wfl-0000Ky-BH
	for [email protected]; Wed, 08 Feb 2006 13:16:21 -0800
Received: from [192.168.2.122] (65-78-26-51.c3-0.smr-ubr1.sbo-smr.ma.cable.rcn.com [65.78.26.51])
	by mail.squishy.cc (Postfix) with ESMTP id CA4AF58D0004
	for <[email protected]>; Wed,  8 Feb 2006 16:16:36 -0500 (EST)
Subject: mysql-server: support multiple ip addresses for bind-address
From: Andres Salomon <[email protected]>
To: [email protected]
Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-yDQRRGFEIICnasTq4b2U"
Date: Wed, 08 Feb 2006 16:16:21 -0500
Message-Id: <[email protected]>
Mime-Version: 1.0
X-Mailer: Evolution 2.5.90 
Delivered-To: [email protected]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02
[Message part 1 (text/plain, inline)]
Package: mysql-server
Version: 4.0.24-10sarge1
Severity: wishlist
Tags: security

Hi,

Unless I'm mistaken, the 'bind-address' setting in my.cnf doesn't appear
to support the listing of multiple addresses.  If someone wants to have
mysqld listen on multiple addresses/interfaces (say, 127.0.0.1 on lo,
192.168.0.252 on eth1, but *not* the public IP bound to eth0), they're
forced to either pick an IP, or have mysqld listen on all addresses.  At
that point, they're required to use iptables rules to block access.  It
would be nice to have bind-address support a list of IP addresses (if it
already does, feel free to document it and close this; I couldn't find
any mention of it, though).

I'm tagging this +security since it's kind of important that people
actually be able to specify which IPs they want mysqld to listen on
(otherwise, why even *bother* with bind-address in the first place?)

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.


Debian bug tracking system administrator <[email protected]>. Last modified: Tue May 13 11:27:51 2025; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.