How to restrict access to mysql through iptables in Debian?

Question

MySQL

Good afternoon, actually the question is in the question :)
in my.cnf set bind-address=0.0.0.0
to MySQL you need to connect from two IP addresses, the question is how to skip them, and block everything else that knocks on 3306?

Answer 1

# iptables -A INPUT -s первый_ip/32 -p tcp -m tcp --dport 3306 -j ACCEPT
# iptables -A INPUT -s второй_ip/32 -p tcp -m tcp --dport 3306 -j ACCEPT
# iptables -A INPUT -p tcp -m tcp --dport 3306 -j DROP