Problem Connection BD in Cloud Server

Targets Web
#1

Hi, my App running local perfect,but in my cloud server not connect to BD mysql , my firewall (iptables) is setting:

Firewall configuration written by system-config-firewall

Manual customization of this file is not recommended.

*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -j ACCEPT
-A OUTPUT -o eth0 -p tcp --dport 3306 -m state --state NEW,ESTABLISHED -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT

some suggestion…?

#2
  1. dont expose your database on the internet
  2. when you think you want to expose your database to the internet see rule #1
  3. run some other kind of app on port 443 using https that your app talks to - an “application server” as it were that sit s between your app & the db and that hackers would have to attack (and they will)
  4. when you don’t want to do #3 see rule 1

as for why - read this list
http://www.cvedetails.com/vulnerability-list/vendor_id-185/product_id-316/version_id-71375/Mysql-Mysql-5.0.77.html

#3

Thank’s, but problem is libraries of 32 bits, not permited connection with any bs server

#4

OK but your server is exposed to the wild internet & it will get found & people will try to hack it
And your firewall doesn’t seem to be much help

And even if they don’t take your database down or hack into it there may be a denial of service attack as your firewall doesn’t help you out there as much as it could

You’re potentially much more exposed than you think you are

#5