security in vicidial

[raloheni]

Hi
vicidialredux
verison 2.2.1
no extra software


i have given a strong password for the root and also to the vicidial admin access to gui

my doubt was whether the hacker can hack my mysql using the cron and 1234 credentials or using root and vicidialnow in goautodial servers

[boybawang]

if your using stand alone server you should set the my.conf add this setting:

bind_address = 127.0.0.1

so that mysql will not be accessible from the outside

[raloheni]

In which context i have to add the bind address

[mysqld]
datadir=/var/lib/mysql
socket=/var/lib/mysql/mysql.sock
# Default to using old password format for compatibility with mysql 3.x
# clients (those using the mysqlclient10 compatibility package).
old_passwords=1
skip-name-resolve
skip-host-cache
max_connections=200

[mysql.server]
user=mysql
basedir=/var/lib

[mysqld_safe]
log-error=/var/log/mysqld.log
pid-file=/var/run/mysqld/mysqld.pid

[williamconley]

also, the mysql port should not be open in a single server installation.