I am configuring a MySQL server that is only intended for computers from internal network/local network machines to access.
Now MySQL has a "bind IP address" setting that, if I set it to the IP address in local network "192.168.2.100", it will only listen to messages coming to that IP address, which means it only accepts requests within the local network and not the outside internet.
Now I am wondering whether this is actually "safe", or is there a possibility someone might actually create a "fake" message, where it can both reach my MySQL server from the outside internet while simultaneously having the "bind" restriction satisfied.
Theoretically this should be "safe" but I am not familiar with the actual network packet format so there might still be loopholes, which is why I am asking this question.
Disconnecting my router from outside network physically is not an option for me. Any help would be appreciated.