the forum is rejecting my reply as spam, so putting this in the answer section to help share more information.
Both droplets (Ubuntu 16) are behind the DigitalOcean firewall, so that should not be blocking anything as they are connected to each other via private network. I did open port 3306 on the DigitalOcean firewall and it had no effect.
iptables are not enabled:
service iptables stop
Failed to stop iptables.service: Unit iptables.service not loaded.
I ran ufw allow mysql
No change in connecting.
I ran ufw disable on both droplets
Firewall stopped and disabled on system startup
At this point 3306 is an open port in the digitalocean firewall.
ufw is completely disabled on both boxes
yet I still get:
telnet xx.xxx.xx.xx 3306
telnet: Unable to connect to remote host: Connection refused
mysql -u username -p -h privateNetworkIP
ERROR 2003 (HY000): Can’t connect to MySQL server on ‘xx.xx.xx.xx’ (111)
telnet xx.xxx.xx.xx 22
Connected to xx.xxx.xx.xx.
Escape character is ’^]’.
telnet on port 80 also works, but ssl port 443 fails like 3306
DigitalOcean Firewall Settings:
Type Protocol Port Range Sources
SSH TCP 22 All IPv4 All IPv6
HTTP TCP 80 All IPv4 All IPv6
HTTPS TCP 443 All IPv4 All IPv6
MySQL TCP 3306 All IPv4 All IPv6
Set the Firewall rules for outbound traffic. Outbound traffic will only be allowed to the specified ports. All other traffic will be blocked.
Type Protocol Port Range Destinations
ICMP ICMP All IPv4 All IPv6
All TCP TCP All ports All IPv4 All IPv6
All UDP UDP All ports All IPv4 All IPv6
Any other ideas?
I appreciate the help on this!