I have an mysql client with a fixed IP that should be able to access a mysql server. The mysql client is integrated in a software and only port, ip, username and password are modifiable.
What would be the best practice to secure a mysql server without changing the mysql client.
EDIT: No changes to the client side are possible besides the port, ip, username and password.
Currently I have this:
/etc/mysql/my.cnf
# bind to all ip's
bind to 0.0.0.0
Restricted the connections for port 3306 to an IP
iptables -I INPUT -i eth0 -p tcp --dport 3306 --src xxx.x.x.xx -j ACCEPT
Drop all traffic to that port that is not allowed
#iptables -I INPUT -i eth0 -p tcp --dport 3306 -j DROP