Re: Abuse Contact Handling

2021-08-06 Thread Suresh Ramasubramanian
of actionable complaints. --srs From: Tom Beecher Sent: Friday, August 6, 2021 11:42:48 PM To: Suresh Ramasubramanian Cc: Mike Hammett ; Matt Corallo ; NANOG Subject: Re: Abuse Contact Handling If you’re complaining about having to maintain an abuse desk

Re: Abuse Contact Handling

2021-08-06 Thread Tom Beecher
> you’re the sort of provider who doesn’t want to staff an abuse desk. > > --srs > -- > *From:* NANOG on behalf of > Mike Hammett > *Sent:* Friday, August 6, 2021 7:51:04 PM > *To:* Matt Corallo > *Cc:* NANOG > *Subject:* Re: Abuse Contact Handling >

Re: Abuse Contact Handling

2021-08-06 Thread Suresh Ramasubramanian
on behalf of Mike Hammett Sent: Friday, August 6, 2021 7:51:04 PM To: Matt Corallo Cc: NANOG Subject: Re: Abuse Contact Handling "we don’t get to tell someone they’re managing their network wrong" Sure we do. They don't have to listen, but we get to tell them. RFCs are full of thing

Re: Abuse Contact Handling

2021-08-06 Thread Mike Hammett
community. - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com - Original Message - From: "Matt Corallo" To: "Mike Hammett" Cc: "NANOG" Sent: Friday, August 6, 2021 8:50:00 AM Subject: R

Re: Abuse Contact Handling

2021-08-06 Thread Matt Corallo
Mike Hammett > Intelligent Computing Solutions > http://www.ics-il.com > > Midwest-IX > http://www.midwest-ix.com > > From: "Matt Corallo" > To: "Mike Hammett" , "NANOG" > Sent: Thursday, August 5, 2021 3:44:43 PM > Subject: Re: Abuse

Re: Abuse Contact Handling

2021-08-06 Thread richey goldberg
Is it even worth sending abuse reports anymore? Currently we just block bad IPs at our network border and move on but we have seen quite an uptick lately in attacks and probes from domestic IPs (US) on our VoIP platforms.Our #1 offender is coming from Microsoft Azure IPs. We have talked

Re: Abuse Contact Handling

2021-08-06 Thread Mike Hammett
rallo" To: "Mike Hammett" , "NANOG" Sent: Thursday, August 5, 2021 3:44:43 PM Subject: Re: Abuse Contact Handling There's a few old threads on this from last year or so, but while unmonitored abuse contacts are terrible, similarly, people have installed automated abuse

Re: Abuse Contact Handling

2021-08-05 Thread goemon--- via NANOG
On Thu, 5 Aug 2021, Matt Corallo wrote: Thus, lots of the large hosting providers have deemed the cost of actually putting a human on an abuse contact is much too high. it seems they have decided that ending up on DBL is their abuse monitoring/reporting mechanism. -Dan

Re: Abuse Contact Handling

2021-08-05 Thread Randy Bush
> One thing I've been thinking for long time is to consider policy > proposals to enforce the usage of the abuse mailbox together with > X-ARF/RFC5965/RFC6650. That will automate probably a so big % of abuse > handling that makes sense even if you need to make some programming, > even if there are

Re: Abuse Contact Handling

2021-08-05 Thread JORDI PALET MARTINEZ via NANOG
One thing I've been thinking for long time is to consider policy proposals to enforce the usage of the abuse mailbox together with X-ARF/RFC5965/RFC6650. That will automate probably a so big % of abuse handling that makes sense even if you need to make some programming, even if there are

Re: Abuse Contact Handling

2021-08-05 Thread Matt Corallo
There's a few old threads on this from last year or so, but while unmonitored abuse contacts are terrible, similarly, people have installed automated abuse contact spammer systems which is equally terrible. Thus, lots of the large hosting providers have deemed the cost of actually putting a

Re: Abuse Contact Handling

2021-08-05 Thread JORDI PALET MARTINEZ via NANOG
In several RIRs we addressed it via a policy, already implemented for some years in APNIC (very useful results up to now), and recently implemented in LACNIC: AFRINIC https://www.afrinic.net/policy/proposals/2018-gen-001-d7 APNIC

Abuse Contact Handling

2021-08-05 Thread Mike Hammett
What does the greater operator community think of RIR abuse contacts that are unmonitored autoresponders? - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com