[anti-abuse-wg] abuse contact responsibilities

Hi all,

I like to raise questions about what kind of
responsibilities an abuse contact should have
and look forward for comments or experiences
you have with other providers.

We currently have a case with a bigger hosting
company (mostly doing serverhousing) from the
RIPE region. They have one abuse contact with
one single abuse mailaddress for all IPs
and rather big netblocks used for serverhousing.

We had to find out, that the only thing they
do with incoming abuse reports, is to forward
them to their customers which actually rent
the equipment.
The don't try to find the security hole themself,
the don't block outgoing email from intruded
and misused servers, they do nothing but
this forwarding.
Surely, the end customers are not familiar
with intrusion detection, have no UNIX/Windows
skills and have no background knowledge, they
can mostly work a servers control panel, and
that's it.

The provider is surely to lazy to insert an abuse
contact for every customer he has.

So:
- should an ISP not try to work out any abuse problem
   together with the customer, if the abuse contact
   address is his ?
- should he not be forced to enter different abuse
   contacts to RIPEs DB, if he does not want to work
   the cases ?
- is there already any kind of regulation, what an
   abuse contact has to do ?
- if not, should there be one ?



Kind regards, Frank
--
PHADE Software - PowerWeb                       http://www.powerweb.de
Inh. Dipl.-Inform. Frank Gadegast             mailto:frank at powerweb.de
Schinkelstrasse 17                                fon: +49 33200 52920
14558 Nuthetal OT Rehbruecke, Germany             fax: +49 33200 52921
======================================================================