Accessing MySQL through dynamic IP address
you can use % as a wildcard to summarize source nets ands limit your attack vector.

so instead of 192.168.68.34, use 192.168.68.% assuming they use a /24 address space for vpn.