How to deny access to port 3306 iptables?

Question

linux

Shared port 3306 for one external server, and when I write iptables -I INPUT ! -s SP -p tcp --dport 3306 -j DROP (for every fireman) then the server with SP is connected but not via LAN. What to do?

Answer 1

iptables -N mysql
iptables -A mysql -s IP1 -j ACCEPT
iptables -A mysql -s IP2 -j ACCEPT
iptables -A mysql -j REJECT # или DROP , что больше подходит по ситуации

iptables -A INPUT -p tcp -m tcp --dport 3306 -m state --state NEW -j mysql