[anti-abuse-wg] Clarification Regarding Needs Assessment and Audits

Hi,

On Thu, Jul 04, 2013 at 05:16:05PM +0200, Frank Gadegast wrote:
> Gert Doering wrote:
> > On Thu, Jul 04, 2013 at 04:52:14PM +0200, Frank Gadegast wrote:
> >>> ... The exact services for which the
> >>> resources are being requested are not considered as part of the
> >>> evaluation process. As an example, if address space is requested for the
> >>> technical need of a mail server, it is not verified what type of mails
> >>> are being sent through that server.
> >>> ...
> >>> - Assignments are registered properly and being used for the purpose
> >>> they were requested for (if not, the technical need is re-evaluated)
> >>
> >> These two points interest me the most.
> >> Lets say, an LIR is requesting IPs for the purpose of access,
> >> but then runs mailservers on it, sending lots of spam.
> >
> > You're mixing "allocation" and "assignment".  The LIR requests an
> > *allocation*, which is not bound to a specific purpose.
> 
> Im mixing nothing here.
> You need to specify a purpose for any assignment you make from
> your allocation, internally or directly to the NCC.

If you write "the LIR is requesting IPs for the purpose of access",
you're mixing up things.  LIRs request IP addresses to give them to
customers.  Not for particular uses.

> And the purpose seems to be re-evaluated when there is an audit
> started.

Read again what Andrew wrote, and keep in mind the difference between
"allocation" and "assignment".

> So the two questions remain:
> 
> - first, how do you find evidence, that the LIR is using the
>    address space now for a different purpose ?

As the *LIR* did not specify a purpose, it can't be "a different purpose"
now.

> - second, did it ever happen, that the NCC revoked address
>    space or allocations or terminated a contract, because the
>    LIR was using the IPs for a different purpose and then denied
>    fix that ?

No, because that situation can not happen.  The LIR does not specify
a purpose, so there is no way they could be used for a "different purpose".

[..]
> Pointing to a possible failure in my wording just stops others in
> answering important questions (what happens a lot lately), simply
> because its interupting "the flow" ;o)

Pointing out confusion between allocations and assignments, and who does
what, is necessary because the questions can't be answered unless the
proper terms are used.

Gert Doering
        -- NetMaster
-- 
have you enabled IPv6 on something today...?

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (89) 32356-444            USt-IdNr.: DE813185279
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 306 bytes
Desc: not available
URL: </ripe/mail/archives/anti-abuse-wg/attachments/20130704/6d3b1eb1/attachment.sig>