making mysql secure via encrypting and blocking a port

[matt bodley]

Hi,

Does anyone have any info about how to make MySQL secure when used with open ports over the net?

For example is it OK to just block a port using the firewall so only a certain IP address can access the port?

Of course encrypting the communications between them too.

Also, what about having a port open for all (no firewall blocking) but using SSH to encrypt the chaneel?
Is this secure?

It would be great if someone knew the answers to these Q's..

Cheers,

Matt