[ previous ] [ next ] [ threads ]
 From:  Gordon Day <gordon at deepcovelabs dot com>
 Cc:  m0n0wall dash dev at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall-dev] Strongly desired audit feature
 Date:  Thu, 23 Jun 2005 14:55:50 -0700
I do agree that this is one way to accomplish keeping track of your 
change history.  But what I want to see is something that you don't have 
to "remember" to do.  In particular, I can't necessarily trust myself or 
my co-workers to always remember to create the log.  The point of an 
audit trail is that you can't not do it.



Chris Dickens wrote:

>I also download my XML config file after each update of my firewall for
>backup purposes.  It doesn't tell me outright which things were changed, but
>a quick run through a DIFF utility easily shows what changed if I'm trying
>to track down a problem.
>-----Original Message-----
>From: Chad R. Larson [mailto:clarson at eldocomp dot com] 
>Sent: Thursday, June 23, 2005 4:13 PM
>To: Gordon Day
>Cc: m0n0wall dash dev at lists dot m0n0 dot ch
>Subject: Re: [m0n0wall-dev] Strongly desired audit feature
>Gordon Day wrote:
>>Beyond being a common external audit
>>requirement, it would be a great aid for those of us with complex rule 
>>sets to see what we changed and when we changed it.
>I use the Backup/Restore feature (under the diagnostic menu) to save the 
>xml after each use of the GUI.  Those xml files are in turn kept under 
>RCS control on a different host.
>          -crl
>Chad R. Larson (CRL22)    chad at eldocomp dot com
>   Eldorado Computing, Inc.   602-604-3100
>      5353 North 16th Street, Suite 400
>        Phoenix, Arizona   85016-3228
>Information transmitted by this e-mail is proprietary to MphasiS and/or its
>Customers and is intended for use only by the individual or entity to which
>it is addressed, and may contain information that is privileged,
>confidential or exempt from disclosure under applicable law. If you are not
>the intended recipient or it appears that this mail has been forwarded to
>you without proper authority, you are notified that any use or dissemination
>of this information in any manner is strictly prohibited. In such cases,
>please notify us immediately at mailmaster at mphasis dot com and delete this mail
>from your records.
>To unsubscribe, e-mail: m0n0wall dash dev dash unsubscribe at lists dot m0n0 dot ch
>For additional commands, e-mail: m0n0wall dash dev dash help at lists dot m0n0 dot ch

DeepCove Labs Ltd.
4th floor 595 Howe Street
Vancouver, Canada V6C 2T5