Out-of-band management. Hook up a serial console that you can get secure access from another host or terminal server. That's the simple way, IMO. You might be able to make a script that takes a known-good or the last used ruleset and apply that like 5 minutes after you apply your new one. Then when you are sure it works, you could pass some args like -force.
-Russ On Wed, 28 Apr 2004, Tim Pushor wrote: > I am looking at trying to come up with a way to change rulesets remotely > with provisions to back out the change if I accidently shoot myself in > the foot ;-) > > I am just wondering if someone has already come up with an elegant (or > not so) way of doing this already? > > Thanks, > Tim >
