Re: [apops] Fwd: [ppml] Policy Proposal 2003-2: Network Abuse]

[Suresh Ramasubramanian <suresh@outblaze.com>]

At 03:36 AM 3/5/2003 -0800, Bill Manning wrote:
> % >2. All networks should [regardless of geographical location] provide
> % >a valid e-mail contact for network [NOC@] and abuse [Abuse@] contact.
> % >Make it standard.
>
>         and this will be more useful than the currently required
>         postmaster and root accounts -how-?
And, do the postmaster and root accounts exist in all places? :)

Not my proposal btw - I'm just forwarding it.

However, the more role accounts exist, the better the chance that at least 
someone around will read and respond to a complaint on net abuse / spam.

A forlorn hope, I fear - given the state several networks are in :(

>         couple of issues with this.
>         ) many delegations predate RIR creation. there is -no-
>         ) RIRs don;t route. ISPs do. "Terminated" IP ranges don't make
>           sense here.
Yeah I know it is dumb - and I didn't draft it, just forwarded it.

I know about legacy delegations ... and the fact that ISPs are the ones who 
route.  But the point this guy wants to make (I think) - and I agree with 
it - is that an alternative can (or rather should) be worked out to tackle 
the huge problem that bogus whois data is becoming, even with the current 
procedures in place.

>         This one is so fraught with legal hairballs that it
>         is almost funny. If you are in the US, can you say
>         RICO... sure you can.  In europe, I think EC privacy
RICO is the *first* thing that gets suggested when this sort of thing comes 
up.  However, those who do propound this idea (in a far more sensible / 
detailed manner than the stuff above) want something on the lines of a 
credit bureau for ISPs, maintaining histories of potential 
customers.  After all, if CC companies can (under heavy regulation) track 
deadbeat debtors, there is no particular reason why spammers can't be 
tracked either.

There is, for example, the ROKSO at http://sbl.spamhaus.org - but that 
doesn't even come close to what is being suggested here.

        suresh


--
srs (postmaster|suresh)@outblaze.com // gpg : 420776FC
outblaze.com postmaster & messaging systems specialist