ssc_tema2.sh

this is my homework about how to instal mysql and let only a specific network to have acces at mysql

#! /bin/bash

# Student COMSA Radu tema 2 laborator index 18

wget http://dev.mysql.com/get/Downloads/MySQL-5.1/mysql-5.1.34-linux-i686-glibc23.tar.gz/from/http://ftp.astral.ro/mirrors/mysql.com/
#download mysql

groupadd mysql
# creare grup

useradd -g mysql mysql
# creare user

cd /usr/local
gunzip < mysql-5.1.34-linux-i686-glibc23.tar.gz | tar xvf -
# dezarhiveaza mysql

ln -s mysql-5.1.34-linux-i686-glibc23 mysql
# creaza link catre directorul in care s-a facut instalarea

cd mysql
chown -R mysql .
chgrp -R mysql .
# schimba ownerul si grupul la mysql a tuturor fisierelor din directorul curent

scripts/mysql_install_db --user=mysql
chown -R root .
chown -R mysql data
# lasa owner mysql pentru date si root pentru restul
bin/mysqld_safe --user=mysql &


# Reguli de firewall:
iptables -A INPUT -t filter -s 1.2.0.0/16 -p tcp --source-port 3306 -j ACCEPT
# accepta toate pachetele tcp de la reteaua 1.2.0.0 pe portul care actioneaza mysql (si anume 3306)

iptables -A INPUT -t filter -p tcp --source-port 3306 -j DROP
# respinge toate pachetele tcp cu portul 3306 care nu sunt in reteaua 1.2.0.0