Allow certain IP's for services in CSF

Add the following line in your /etc/csf/csf.allow

tcp|in|d=3306|s=192.168.x.x
tcp|out|d=3306|d=192.168.x.x

Restart csf with : csf -r

This will allow incoming/outgoing connections to port 3306