MySQL LAN access.

Do I have to open my firewall to allow LAN access to MySQL? If so what port does MySQL listen on? After that can I just skip to the MySQL GRANT commands for a given IP or are there some permissions issues? Thanks for your help john