Hot answers tagged security
Yes, you can use the old system. It's not less secure than firewalld (provided you write your firewall rules correctly). It also doesn't run a daemon, so it's not using a (relatively) large amount of your limited RAM.
You are confusing dport and sport. For instance if you want to get back DNS replies, this : iptables -A INPUT -p udp --dport dns -j ACCEPT Should be : iptables -A INPUT -p udp --sport dns -j ACCEPT You made this mistake almost everywhere.
Well, the obvious answer would be to compare the BIOS you have with the BIOS released by the manufacturer... of course, that only works if the BIOS released by your manufacturer doesn't contain a rookit to begin with. Failing that, you're left with a topic you could literally write several books on... or parlay into millions of dollars worth of IT security ...
Either you or the CA had to create a private/public key pair, before the CA signed the public key. You need the private key in order to decrypt the TLS traffic. If you created the key pair, then you have the private key file. If the CA created it, then they have it and you need to get it from them.
You've got Yourself a SSL certificate for your domain, I think you have exported certificate without private key. A ".cert" (or ".cer" or ".crt") file usually contains a single certificate, alone and without any wrapping (no private key, no password protection, just the certificate). Ex- Some CAs store the certificate's private key in a Private Key (.pvk) ...
Only top voted, non community-wiki answers of a minimum length are eligible