[anti-abuse-wg] Clarification Regarding Needs Assessment and Audits

Peter Koch wrote:
> On Thu, Jul 04, 2013 at 05:31:25PM +0200, Gert Doering wrote:
>
>> No, because that situation can not happen.

Sure it can !

If I remember old times right, we first got our allocation
when becoming a RIPE member and had a very small assignment
window.

We had to send network plans to the NCC for the first
assignments we made and because they were acceptable,
our assignment windows was raised, so we could assign
most IP blocks for our customers ourself from then on
up to our new assignment windows, but surely
we still have to track that our assignments comply
and need to know wich customer uses wich block
for what.

So: theres is a lot of assignment *purposed* RIPE NCC
should know about directly and the others should be known
to the LIR.

The question is: is the NCC ordering network plans
from the LIR during an audit to check the purpose ?

Lets say the LIR is saying: network xy was assigned
to customer yz and the customers sayd the purpose
was "routing equipment".
And now the NCC realizes that there is lots of
spam and other abuse coming out of these assignments.
What happens: has the LIR to cancel the contract with
its customer ?
Or switch the use back to "routing equipment" ?
And if this kind of confusion is true for most
of the assignments for the LIR ?
Will the LIR take this as a sign for a "bad" LIR
and terminate its contract ?
Or lower his assignment windows ?

I would really like to have an example of a
audit process that ended bad for the LIR or
its customers ... how did it really worked ...

> The LIR does not specify
>> a purpose, so there is no way they could be used for a "different purpose".
>
> in all fairness, Andrew's response made the 'purpose' compliance
> of the assignments subject to the evaluation in his response.
> Now, I'd appreciate a clarification from the NCC what level of
> abstraction they consider a 'purpose' in this sense.

Exactly :o)

>  I'd be surprise
> to learn this is a website screening or any traffic assessment.
> I could, however, understand if this included a check of proper
> application of the assignment rules.  To that extent, believe it
> or not, an assignee stating ''I'm gonna send lotsa mails''
> has demonstrated more of a technical need than someone claiming
> they love and collect small prime numbers in IP addresses.
>
> -Peter
>
>


Kind regards, Frank
--
PHADE Software - PowerWeb                       http://www.powerweb.de
Inh. Dipl.-Inform. Frank Gadegast             mailto:frank at powerweb.de
Schinkelstrasse 17                                fon: +49 33200 52920
14558 Nuthetal OT Rehbruecke, Germany             fax: +49 33200 52921
======================================================================