When can I access the MySQL server on port 3306/tcp from hosts outside the CS department?
The sole purpose of the MySQL server is to support http applications on z. As such, you should be able to administer MySQL from your http application. (This is basically a security policy — I don’t want to make a MySQL server visible to the endless stream of portscans, so 3306/tcp is blocked at the router).
