Remote Access

Hi
I have a mysql database instance running on a box that is behind a
fire-wall. I want to disable some users access to the database when
they are logging in from outside the firewall (internet). I know that
it is possible to deny access to static IP addresses at the firewall.
However, some of my users can have dynamic IP's (eg. modem). Is there
anyway to determine the IP address of the user and deny access if it is
not an intranet IP.

Thanks for your help.

soup_or_power@yahoo.com wrote:
> anyway to determine the IP address of the user and deny access if it is
> not an intranet IP.

I would use the GRANT statement to give these users access only when
connecting from the intranet. For example:

GRANT ALL PRIVILEGES ON databasename.* TO 'username'@'192.168.0.%'
IDENTIFIED BY 'password';

Assuming that your intranet subnet is on 192.168.0, from the perspective
of the MySQL server host.

You should REVOKE any other privileges the user has before doing this,
or else both sets of privileges will be in effect and the more
permissive one will allow them in.

Regards,
Bill K.