[acm-tf] Abuse Contact Information - Policy Proposal

Hello,

as we decided yesterday in the conference call we will start working on
a policy proposal from now on to have our new proposal ready for
discussion at RIPE 63.


I suggest going through a typical policy text step by step and as warm
up starting with the "Summary of Proposal", the "Summary of a current
problem" and the situation on other RIRs.

#####

Summary of the proposal:

This is a proposal to introduce a new contact attribute named abuse-c,
which can be references by inetnum, inet6num and aut-num objects. It
provides a more accurate and efficient way for abuse reports to reach
the correct network contact and helps reporting institutions to find the
correct abuse contact information more easily.

#####

Summary of the current problem:

Network owners increasingly operate dedicated abuse handling
departments, distinct from the basic operations department.

More and more network owners and other institutions are also starting to
exchange data about abusive behavior with each other, to more quickly
allow networks to identify internal abuse, external abuse, and other
security problems.

Currently within the RIPE region, the biggest problem for network
operators is to know the best place to publish abuse contact information
(irt, "abuse-mailbox:", "remark-fields:", and in addition to that, in
which object they should publish them?). On the other hand abuse
reporting parties having a huge problem with finding a correct abuse
contact in the variety of possibilities.

This proposal will help to stop uncontrolled growth and solves the above
mentioned problems.

#####

Situation in other RIRs

AfriNIC:
Policy Proposal AFPUB-2010-GEN-006 is awaiting implementation.
http://www.afrinic.net/docs/policies/AFPUB-2010-GEN-006-draft-02.htm

APNIC
Policy Proposal "prop-079: Abuse contact information" was implemented in
November 2010.
http://www.apnic.net/policy/proposals/prop-079

ARIN:
An abuse-POC exists for Organisational ID identifiers.
https://www.arin.net/knowledge/database.html#abusepoc
ARIN decided to make abuse-c mandatory.
https://www.arin.net/announcements/2011/20110718.html

LACNIC:
An "abuse-c:" exists for aut-num, inetnum and inet6num objects.
http://lacnic.net/en/politicas/manual4.html

#####

I copied some of the text parts from my former proposal to have an easy
kick-off. I guess this will be enough for a warm-up, so please feel free
to change, comment and discuss the parts above and as soon as we have a
rough consensus here we can start talking "Policy Text".

Thanks,

Tobias


--
| Tobias Knecht | CEO | abusix UG (haftungsbeschraenkt)
| tk at abusix.com | http://abusix.com
| Postfach 210127 | 76151 Karlsruhe | Germany
| ---
| Register of Companies(Handelsregister): HRB 707959
| District of Court(Amtsgericht) Mannheim/Germany
| Registered Office: Karlsruhe/Germany
| CEO: Tobias Knecht

Follow abusix on Twitter! http://twitter.com/abusix

-------------- next part --------------
An embedded message was scrubbed...
From: Denis Walker <denis at ripe.net>
Subject: [acm-tf] some thoughts on issues raised today
Date: Wed, 15 Jun 2011 21:49:36 +0200
Size: 6944
URL: <https://www.ripe.net/ripe/mail/archives/acm-tf/attachments/20110921/aa0a60f2/attachment.mht>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 307 bytes
Desc: OpenPGP digital signature
URL: <https://www.ripe.net/ripe/mail/archives/acm-tf/attachments/20110921/aa0a60f2/attachment.sig>