[arin-ppml] Policy Proposal 2003-1: Required Performance of Abuse Contact

[Shawn Bakhtiar]

Thank you for the response Bill!

I truly appreciate the guidance, and will start doing my homework  :)

As I mentioned in my correspondence with John, this seems like a very common sense proposal and currently, there is an inconsistency in the way the community is handling it. Some providers, do respond, even if it's an auto responder, that they have received the complaint and are following up. AWS, of all people, even creates a ticket (some do, not all), and closes it, when the issue has been mitigated (again something that some do, but not all). 

Are you telling me that AWS can do (and is willingly doing) something that Google and Microsoft can not?

Again, I will certainly do my homework, but those who are in essence currently complying with the aforementioned (proposed) policy, are by definition, proving the naysayers wrong, especially when a multination conglomerate like AWS (who I'm sure is fielding many of these complains on a daily basis) is doing it without it being part of the policy. 

I am truly curious as to the communities opinion on this (and I'm going to do my homework as you suggested) given the conditions we are facing in 2025. There are times my instances are spending more CPU cycles dealing with this overt abuse, than dealing with actual real business. 

Again, thank you for your guidance, and I look forward to both reading the history and further engaging this community, which IMHO, is a no brainer when it comes to creating an environment "that supports the operation and growth of the Internet." 

I have a beautiful day sir :)

> On Aug 28, 2025, at 3:24 AM, William Herrin <bill at herrin.us> wrote:
> 
> On Wed, Aug 27, 2025 at 11:45 AM Shawn Bakhtiar <shashaness at gmail.com> wrote:
>> I would like to re-introduce the following Policy Proposal from 2003 to hold abuse POCs accountable.
>> https://www.arin.net/vault/participate/policy/drafts/2003/2003_1/
> 
>>> Changes to ARIN’s policies may be made via submission of a policy proposal
>>> via ARIN’s Policy Devcelopment Process - more details available here
>>> - https://www.arin.net/participate/policy/pdp/
> 
> Hi Shawn,
> 
> I note that the practical question of "how do I submit a policy
> proposal" is not answered in
> https://www.arin.net/participate/policy/pdp/, or if it is, it's buried
> so deeply I can't find it.
> 
> What you probably want is the policy proposal template, which you can
> find here: https://www.arin.net/participate/policy/pdp/appendix_b/
> 
> You can also discuss policy changes here on the mailing list without
> making a formal proposal. That would enable you to gather information
> which could inform a formal proposal.
> 
> I recommend you sift through the mailing list archives at
> https://lists.arin.net/pipermail/arin-ppml/ and read the original
> discussions around proposal 2003-1. This can help you understand what
> defects in that proposal led to it failing to reach consensus.
> 
> Finally, I note that there have been other off and on discussions
> about the published POCs and their utility. It might be worth digging
> into them as well. Try a Google search such as, "site:lists.arin.net
> abuse poc"
> 
> Regards,
> Bill Herrin
> 
> 
> 
> -- 
> William Herrin
> bill at herrin.us
> https://bill.herrin.us/