Remote MySQL
Allow specific trusted IPs to connect to MySQL from outside the server.
Allow an IP
CSF will open port 3306 only for this IP. Everyone else stays blocked.
Allowed IPs (0)
No IPs allowed. MySQL only accepts local connections.
Only the IPs listed above can reach port 3306. Users still need a database user granted for their host, which they set in their own panel's Remote MySQL Access. When the last IP is removed, MySQL goes back to local-only.