Dynamic IP log retention = 0?
Steven M. Bellovin
smb at cs.columbia.edu
Wed Mar 11 10:52:57 CDT 2009
On Wed, 11 Mar 2009 12:42:40 -0300
Rubens Kuhl <rubensk at gmail.com> wrote:
> Covad telling you they don't keep logs is different from them not
> really having the logs... but, if they really don't keep logs, they
> are posing a risk that FBI or DHS might not be happy with. The feds
> will probably be more persuasive than you, so maybe hinting them about
> this situation may change something to better.
There is no US legal requirement for keeping logs. The FBI et al. may
want you to, and there is a bill before Congress to mandate retention
(and that has been discussed on NANOG -- look for the Subject:
'Legislation and its effects in our world', or you can find the text
itself at http://thomas.loc.gov/cgi-bin/query/z?c111:H.R.1076:) but
there is no legal obligation to keep DHS happy.
--Steve Bellovin, http://www.cs.columbia.edu/~smb
More information about the NANOG