Disabling mySQL remote access ENABLES SSLv2 for plesk

[akiva]

My server is set up to disable SSLv2 (a PCI requirement)

It's disabled both for HTTP and for Plesk.

The latest PCI check requires remote access for mySQL be turned off -- which I did (in /etc/my.cnf by adding skip-networking)

Which works -- mySQL no longer checks (and that test passes PCI)

HOWEVER, I'm now failing https-alt on port 8443 -- plesk.

If I remove skip-networking from my.cnf I pass the SSLv2 check, but fail the mySQL remote access test.

Anyone have ANY idea WHY this is happening?

TIA

 

[Amin Taheri]

What if you leave the remote access enabled and put in a firewall rule on iptables to reject anything that is not from localhost or your servers IP ?

 

[Amin Taheri]

Also, you can go here
http://efodder.com/2008/01/15/how-to-disable-sslv2/

That will show you how to disable SSLv2 on https (443) as well as Plesk httpsd (8443) ports - maybe if you disable on MySQL you can use the above to disable on the rest?