Anyway to set settings back to last 10 mins?

[torontob]

Hi everyone,

I am trying some risky settings on a pfsense 2.0.1. It's a remote box and I don't want to loose my OpenVPN access to it. Is there anyway that I make the changes and then the router loads it's previous settings after 10 mins? I basically want a fail-safe check in place.

Thanks,

[podilarius]

Don't know of a GUI way to do this. If you are creative, perhaps you could with a cron script. I just don't think it is doable. It would be an interesting feature though.

[doktornotor]

@podilarius:

It would be an interesting feature though.

Definitely would be very useful. Also, this must be doable somehow via cron, since the functionality actually exists in the shell - (15) Restore recent configuration, with the files being easy to find:

ls -l /cf/conf/backup/
total 485
-rw-r--r--  1 root  wheel    625 Jun 25 16:00 backup.cache
-rw-r--r--  1 root  wheel  94778 Jun 25 04:45 config-1372128303.xml
-rw-r--r--  1 root  wheel  94113 Jun 25 04:46 config-1372128341.xml
-rw-r--r--  1 root  wheel  93486 Jun 25 08:00 config-1372128376.xml
-rw-r--r--  1 root  wheel  93429 Jun 25 12:00 config-1372140004.xml
-rw-r--r--  1 root  wheel  93429 Jun 25 16:00 config-1372154403.xml

[adam65535]

This would be very useful.  I do something kinda similar when I make a change on custom Linux firewalls.  I actually just use 'screen' (virtual terminal that handles disconnects and re-attaches) to do it on there though.  I know that doesn't help us here but it does show functionality like this would be useful.  I run screen and then do a similar command such as…

/etc/firewall.sh ; sleep 120; /etc/firewall-previous.sh

If something goes wrong and I can not stop the command line from executing it will automatically run the old firewall config in 2 minutes.  I use that every time I make a change.  It has proved useful :).

[torontob]

I do the same for firewall on CentOS.
Maybe the dev team can take this into consideration and create a fail-safe button that restores settings after a specified time if user doesn't acknowledge by clicking on fail-safe button.

1- Fail-safe can be ENABLED or DISABLED when needed - so the admin can use it ONLY when needed. Maybe OFF by default
2- Fail-safe allows for time setting as in 1 minute, 3 minutes, 5 minutes, 10 minutes….
3- Fail-safe Restore DOES NOT apply or roll back the settings if user presses "ALL GOOD" button after the change is done within the kick-off time.

Any other suggestions?

Thanks everyone for input - I hope this gets picked up by Dev team! Vote here please