Re: [anti-spam-wg@localhost] Anti-spam WG draft minutes RIPE 46

[furio ercolessi <]

On Sat, Sep 06, 2003 at 12:23:43AM +0200, Markus Stumpf wrote:
> 
> I'd propose an (incompatible) change to the whois server:
> do not send "changed:" records unless a special option is given.
> Neither on inetnum, route or person objects. As every changed: record
> contains an email address clueless people/programs go for that. We often
> receive complaints to addresses that are listed in changed: records of
> persons that are admin-c or tech-c for abused hosts (and some records
> date back to 1996 and are no longer under our control anyway).

In my opinion the current trend of using hijacked blocks makes
changed lines very important to see what happened, and I would rather
be in favor of somehow somehow this information for historical purposes,
regardless of the user's preferences.

For those not familiar with this sad phenomenon:
http://completewhois.com/hijacked/index.htm
http://www.spamhaus.org/rokso/search.lasso?evidencefile=2493
http://www.securityfocus.com/news/5654

> I'd propose to add abuse-c: records for inetnum and route objects.

I second that.  See also what the Cyberabuse abuse-contact project 
(whose goal is to associate an abuse email to any given IP) says at
http://www.fr1.cyberabuse.org/whois/?page=abuse-contact
in the RIPE section.

furio