From: "Geo." 

Just came across the lists, fyi.

Geo.

-----------------------

Does anyone have any ideas why MS decided to put the firewall log files in
the c:\windows directory as a straight text file rather than using the
event logs (ie a new firewall log)

Think the logic through

The OS directory is not supposed to be used for temporary files (and I
include logs in this). How are we supposed to secure the OS areas if it
creates logs there !??

File based logs require NBT ports open so that you can read them remotely,
this limits the effectiveness of the firewall.

If event logs were in use, central management via MOM would be possible and
all the standard event log handling tools could be used.

Regards
Tim

--- BBBS/NT v4.01 Flag-5