Suppose:

• you are connected to your management virtual desktop on a remote site terminal server;
• you are working on the gateway configuration from that remote desktop session, with WinBox/SSH Safe Mode Enabled;
• you make a mistake that cut WAN connection of the router but not LAN connections.

I think Current Safe Mode is not helpful and you can do anything from remote.

More helpful would be a Safe+ Mode such that uncommitted pending changes are unrolled after a configurable timeout since Safe Mode activation or even better since latest activity on the WinBox/SSH session. But I don't think there is even if, from what i can see, has been discussed since longtime.

In the meanwhile I would like to make something like one or more of the following recovery procedures.

• At 3:00 AM start a script that unroll pending safe mode changes, if any.
• At 3:00 AM make a backup of the router configuration without the pending uncommitted safe mode changes on the attached USB/SSD.
• At 3:05 and/or when a user on the remote site press reset button on the router the last backup in the backup directory is restored.

The last one is for when you even forget to activate Safe Mode.

There is a way to do one or more ot the previous action from within a script?

Write a script on a virtual desktop that will kill WinBox if some pings failed.

I'll prefer one of the options I proposed, if possible.

Sounds like a good idea, this has bitten me more than once.