Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!
openssl genrsa -des3 -out rootCA.key 4096
### Disable ICMP Timestamp Response Ubuntu LTS ### | |
# sysctl disable tcp_timestamps | |
echo 0 > /proc/sys/net/ipv4/tcp_timestamps && \ | |
echo "net.ipv4.tcp_timestamps = 0" > /etc/sysctl.d/tcp_timestamps.conf && \ | |
sysctl -p && \ | |
sysctl -a | grep "net\.ipv4\.tcp_timestamps" | |
# open icmp to specified segment | |
iptables -A INPUT -s 10.10.0.0/16 -p icmp -m icmp --icmp-type 8 -j ACCEPT |