[ppml] Proposal: make Abuse Handle *REQUIRED* for AS Registration

[Joe Provo]

On Thu, Jul 24, 2003 at 04:15:44AM -0700, bmanning at karoshi.com wrote:
> > If every AS and IP Whois record had an abuse@ or security@ mailbox the
> > Internet would be a MUCH safer place.	
> 
> 	why do you think that these contacts would be kept any more
> 	current/correct than the already -REQUIRED- contacts, e.g.
> 	
> 	root and postmaster contacts/accounts are -REQUIRED- 
> 	so why not use those instead?  
> 
> 	your presumption that adding more required email role accounts
> 	will make things safer does not appear to me to be well grounded.

What's required is some form of enforcement process for outright 
bogus/stale data. Merely noting "goshg this is stale" Doesn't Cut 
It. At the very least, why are there not entries in the ARIN IRR
registry for ALL the data over which they have responsibility? 
The base /8s, the as-yet unallocated blocks, and the known 
stale/bogus blocks could be trivially represnted iby the 
authoritative party in a way that can help stem the abuse.

Yes, people who want to believe RobT's definition of bogon can 
use his server, but when the authoritative registry doesn't do 
all they can to note the abuse, what motivation is there for the 
rest of us paying and non-abusing members supposed to both 
continue to pay and not abuse the system? The registries must 
police that over which they have registration authority and when 
something is called into question flag it and jump up and down 
in *every* possible way such that it will be squashed.


% whois -h whois.arin.net 146.20.36.0
OrgName:    Erie Forge and Steel
OrgID:      EFS
Address:    1341 West 16th Street
Address:    P.O. Box 180
Address:    Erie, PA, 16512
City:
StateProv:
PostalCode:
Country:    US

NetRange:   146.20.0.0 - 146.20.255.255
CIDR:       146.20.0.0/16
NetName:    IWAVE
NetHandle:  NET-146-20-0-0-1
Parent:     NET-146-0-0-0-0
NetType:    Direct Allocation
Comment:    The information for this network has been reported to
Comment:    be invalid. ARIN has attempted to obtain updated data, but
has
Comment:    been unsuccessful. To provide current contact information,
Comment:    please e-mail hostmaster at arin.net.
RegDate:    1991-01-18
Updated:    2003-06-30

% whois -h whois.ra.net 146.20.0.0/16
%  No entries found for the selected source(s).

%  whois -h rr.arin.net 146.20.0.0/16 

% ARIN Internet Routing Registry Whois Interface

% No entries found in ANS, ARCSTAR, ARIN, BCONNEX,
% BELL, CANET, CW, FGC, KOREN, LEVEL3, POC, RADB, RIPE and VERIO database.

%

route-views.oregon-ix.net>sho ip bgp 146.20.0.0/16 lo | inc /
*  146.20.36.0/22   217.75.96.60                           0 16150 8434 3549 10910 10910 10910 20473 i
*  146.20.40.0/21   217.75.96.60                           0 16150 8434 3549 10910 10910 10910 20473 i
*  146.20.48.0/20   217.75.96.60                           0 16150 8434 3549 10910 10910 10910 20473 23131 i
*  146.20.64.0/19   217.75.96.60                           0 16150 8434 3257 8001 3638 12277 i
*  146.20.80.0/21   204.42.253.253           2             0 267 2914 4474 3638 12277 i
*  146.20.88.0/22   204.42.253.253           2             0 267 2914 4474
3638 12277 i
route-views.oregon-ix.net>


joe "forge and steal?" how many origin ASns for the single allocation (not
    deaggregated)? Hrmmmm.....

-- 
             RSUC / GweepNet / Spunk / FnB / Usenix / SAGE