Having port 3306 (or whatever your MYSQL port is) open is unsafe.
Not only can people crash your game server but they can have unauthorized access to your mysql server.
Best way to deal with security problems is to 'dissappear' onto a SSL connection
Any one using root;root or mangos;mangos for host;password is asking for trouble
Oh and don't forget port 80 for http if there's a website involved