> Afair, in previous talks, Ann suggested that if you have to choose one or
> another, choose FW ON.
>
> The best thing would be if someone could simulate some crashes (like power
> failure) in both configurations and report back about existence of corruption.

Unfortunately, it is not always possible for a simulation to catch all possible modalities.

The hard truth is that the only _absolute guarantee_ to prevent database corruption is FW = ON.


Sean