add access to mysql tcp port 3306 to whitelist. only from localhost