[arin-ppml] Draft Policy ARIN-2021-7: Make Abuse Contact Useful

[JORDI PALET MARTINEZ]

There is no need to define what is abuse, and in fact this is not good neither feasible, because it may depend on each country jurisdiction.

What it must be enforced is that the resource holder can be notified about that and takes care of looking at it, as part of his/her job as the resource holder. If an specific abuse for the victim is not abuse in the jurisdiction of the resource holder, you can just say it, then the victim can decide if that has a sufficient impact as to block that network or look for alternative solutions.

El 27/10/21 22:16, "Owen DeLong" <owen at delong.com> escribió:



    > On Oct 27, 2021, at 09:40 , JORDI PALET MARTINEZ via ARIN-PPML <arin-ppml at arin.net> wrote:
    > 
    > It doesn't work if emails aren't validated at least a couple of times per year.

    Meh… Doable, but expensive.

    > It doesn't work if the policy doesn't enforce that the resource actually addresses the abuse cases.

    Which it can’t really do… We don’t even have an agreed upon definition for what constitutes abuse and I
    don’t think ARIN belongs in the internet police business.

    > It doesn't work if the policy allows an auto-responder that enforces a form submission.

    Which is the current state of things and I suspect you have an uphill battle if you wish to change.

    > Ideally, we, as a global community, should work into a standard email-based format (which already exists), an allows to differentiate between spam or real abuse reports, and embed the logs, headers, etc.

    Want to bet that I can’t write an abuse report generator for any standard you choose in less than 24 hours that will not get detected as SPAM by automation?

    Owen

    > 
    > 
    > El 27/10/21 18:24, "ARIN-PPML en nombre de William Herrin" <arin-ppml-bounces at arin.net en nombre de bill at herrin.us> escribió:
    > 
    >    On Wed, Oct 27, 2021 at 9:07 AM <hostmaster at uneedus.com> wrote:
    >> I think that is wrong, since
    >> email IS the current standard for reporting abuse.
    > 
    >    And how is that working out for you?
    > 
    >> Already there are operators that have set up autoresponders to "demand"
    >> you report abuse by their web application and stating that they are
    >> choosing to ignore your email submission.
    > 
    >    Exactly. That's how it's working out for you.
    > 
    >    Regards,
    >    Bill Herrin
    > 
    > 
    >    -- 
    >    William Herrin
    >    bill at herrin.us
    >    https://bill.herrin.us/
    >    _______________________________________________
    >    ARIN-PPML
    >    You are receiving this message because you are subscribed to
    >    the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).
    >    Unsubscribe or manage your mailing list subscription at:
    >    https://lists.arin.net/mailman/listinfo/arin-ppml
    >    Please contact info at arin.net if you experience any issues.
    > 
    > 
    > 
    > **********************************************
    > IPv4 is over
    > Are you ready for the new Internet ?
    > http://www.theipv6company.com
    > The IPv6 Company
    > 
    > This electronic message contains information which may be privileged or confidential. The information is intended to be for the exclusive use of the individual(s) named above and further non-explicilty authorized disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited and will be considered a criminal offense. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited, will be considered a criminal offense, so you must reply to the original sender to inform about this communication and delete it.
    > 
    > 
    > 
    > _______________________________________________
    > ARIN-PPML
    > You are receiving this message because you are subscribed to
    > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).
    > Unsubscribe or manage your mailing list subscription at:
    > https://lists.arin.net/mailman/listinfo/arin-ppml
    > Please contact info at arin.net if you experience any issues.




**********************************************
IPv4 is over
Are you ready for the new Internet ?
http://www.theipv6company.com
The IPv6 Company

This electronic message contains information which may be privileged or confidential. The information is intended to be for the exclusive use of the individual(s) named above and further non-explicilty authorized disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited and will be considered a criminal offense. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited, will be considered a criminal offense, so you must reply to the original sender to inform about this communication and delete it.