enable port 3306 not blocked by iptable iptables -A INPUT -i eth1 -p tcp --destination-port 3306 -j ACCEPT