Re: [anti-spam-wg@localhost] Re: Abuse contact

[Jan Meijer <]

On Mon, 31 Mar 2003, Florian Weimer wrote:

> "Wilfried Woeber, UniVie/ACOnet" woeber@localhost writes:
>
> >>Isn't the IRT object dead?
> >
> >   What is your definition of "dead" here? :-)
>
> I've seen no deployment so far, and I pretty much doubt we see
> large-scale use.

See down below.  All inet-num objects maintained by SURFnet should contain en
mnt-irt attribute.  If you encounter one though, please notify lir@localhost.

Getting the IRT object itself was -at the time- the hard bit as procedures had
not settled in yet.  If your IP-space is well maintained with a mnt-by:
attribute in all inetnum objects it should be little work to update your
registrations.  It was with us.

> I don't see why the same problem shouldn't resurface with the IRT
> object, after some time.  As long as RIPE or some other entity doesn't
> receive funds to aggressively review those objects and flags offenders
> in some way, I don't see a real, long-term advantage.

Our irt-object is maintained by a trustbroker for CSIRTs, the European Trusted
Introducer (http://ti.terena.nl/).

> In addition, large shops, the people who care about security tend to
> have no word over the contents of WHOIS records. 8-(

But the people now receiving the admin-c/tech-c mail and busy forwarding
abuse-complaints to the appropriate people (oh my, am I naive ;) might be
interested in receiving *less* abuse-mail on their accounts.  That might be the
right incentive to get whois-records updated.

Jan

-- 
/~\ The ASCII                 /     Jan Meijer
\ / Ribbon Campaign        -- --    SURFnet bv
 X  Against HTML            /       http://www.surfnet.nl/organisatie/jm/
/ \ Email                           http://cert-nl.surfnet.nl/

zuurtje(meijer)Wed ~ > whois -h whois.ripe.net 192.87.108.3
% This is the RIPE Whois server.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/ripencc/pub-services/db/copyright.html

inetnum:      192.87.108.0 - 192.87.111.255
netname:      SIPLAN
descr:        SURFnet bv
descr:        Utrecht
country:      NL
admin-c:      SENS1-RIPE
tech-c:       SENS1-RIPE
status:       ASSIGNED PA
notify:       sens@localhost
notify:       info@localhost
mnt-by:       SN-LIR-MNT
mnt-irt:      irt-CERT-NL
changed:      Erik-Jan.Bos@localhost 19961219
changed:      ripe-dbm@localhost 19990706
changed:      jan.meijer@localhost 20000417
changed:      jan.meijer@localhost 20010315
changed:      Derk.Reinders@localhost 20010326
changed:      Rogier.Spoor@localhost 20020607
source:       RIPE

route:        192.87.0.0/16
descr:        SURFnet CIDR Block IV
origin:       AS1103
notify:       netmaster@localhost
mnt-by:       AS1103-MNT
mnt-lower:    SN-LIR-MNT
changed:      Erik-Jan.Bos@localhost 19960416
changed:      Wim.Biemolt@localhost 20011213
source:       RIPE

role:         SURFnet Services and Support
address:      Radboudkwartier 273
address:      3511 CK Utrecht
address:      The Netherlands
phone:        +31 30 2305305
fax-no:       +31 30 2305329
e-mail:       SenS@localhost
admin-c:      JS489-RIPE
tech-c:       JS489-RIPE
nic-hdl:      SENS1-RIPE
notify:       info@localhost
notify:       SenS@localhost
mnt-by:       SN-LIR-MNT
mnt-by:       SN-LIR-MNT
changed:      Jan.Meijer@localhost 19980107
changed:      Derk.Reinders@localhost 20010326
source:       RIPE


zuurtje(meijer)Wed ~ > whois -h whois.ripe.net irt-CERT-NL
% This is the RIPE Whois server.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/ripencc/pub-services/db/copyright.html

irt:          irt-CERT-NL
address:      p/a SURFnet bv
address:      Postbus 19035
address:      3501 DA Utrecht
phone:        +31 30 2305305
fax-no:       +31 30 2305329
e-mail:       cert-nl@localhost
signature:    PGPKEY-A6D57ECE
encryption:   PGPKEY-A6D57ECE
admin-c:      SAM36-RIPE
tech-c:       SAM36-RIPE
auth:         PGPKEY-834125A1
auth:         PGPKEY-3D10C493
remarks:      CERT-NL is the Computer Emergency Response Team of SURFnet
remarks:      This is a level 2 IRT (http://www.ti.terena.nl/teams/level2.html)
irt-nfy:      cert-nl@localhost
notify:       info@localhost
notify:       tiirt@localhost
mnt-by:       TRUSTED-INTRODUCER-MNT
changed:      menno.pieters@localhost 20020305
source:       RIPE

role:         SURFnet Account Management
address:      Radboudkwartier 273
address:      3511 CK  Utrecht
address:      The Netherlands
phone:        +31 30 2305305
fax-no:       +31 30 2305329
e-mail:       info@localhost
admin-c:      WD42-RIPE
admin-c:      PH300-RIPE
tech-c:       WD42-RIPE
tech-c:       PH300-RIPE
nic-hdl:      SAM36-RIPE
notify:       info@localhost
mnt-by:       SN-LIR-MNT
changed:      Peter.Hinrich@localhost 20000125
changed:      Peter.Hinrich@localhost 20000801
changed:      Walter.vanDijk@localhost 20010909
source:       RIPE