>What I need is a way to see "what were router 003's configuration files
like 
>on Last Thursday?" or in the case of cpe equipment, to be notified when
a 
>local "admin" gets in and makes a change.   As you mention above, if the

>ISP's phone number changes, I'd like some record of when someone made 
>the change, and what the change was.  

>From my perspective of a SOHO basic dial-up firewall user the major
advantage of a floppy based system is the write protect tab protects
against all changes, presumably from an attacker.  A simple power cycle
brings back the original configuration--my firewall is only ON when I
need internet access.  For SOHO users floppy based systems are still
important, but tracking changes much less so (use pencil & paper).

And if I REALLY wanted to keep a distributed floppy from being changed,
I'd use a floppy without a write-protect tab (I can think of 3 ways of
doing that).  If some "local admin" defeated that--well, he'd only do it
ONCE in my company.  ;-)  I'm not sure what you have is more of a
"management" problem than a software problem.

It seems you're thinking of an enterprize environment with frequent
configuration changes, and in that case it seems like a floppy-based
implementation is much less likely.  With a much more complex
configuration, 24x7 operation and much larger logs, I'd expect it's much
more likely comes more storage space--either a small HD or a USB flash
drive, etc.

So it seems to me you could still be thinking of having more than just a
single floppy.



-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php

_______________________________________________
leaf-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-devel

Reply via email to