Take the tour ×  I want to connect to my home install of
phpmyadmin. I restricted the connection for this to my 2 IPs.
But I don't really understand this whole OSI layering. I do know
that the IP is saved in the second layer, and I guess that the
IP restriction will just look for this layer.  Is it possible to
read out the password from the 7th layer, even if I have an IP
restriction?  share|improve this question Yes it's posible for a
third party to sniff the password, further, if iptables stops
doing it's job at some point in the future or the client is
compromised then the security is compromised. Further, sending
queries over HTTP means that you are vulnerable to MITM. It
might be safe for now, but this really demonstrates why defence
in depth is a good idea. Use HTTPS –  symcbean Feb 21 at 11:04
add comment  2 Answers  up vote 11 down vote accepted  The OSI
layers are a model which was not meant for IP but for an older,
competing protocol. IP does not fit well in that layer,
especially when envisioning