November 2011 - anti-abuse-wg

Re: [anti-abuse-wg] 2011-06 New Policy Proposal (Abuse Contact Management in the RIPE NCC Database)
by Gilles Massen 29 Mar '12

29 Mar '12

Hello, This policy proposal seems a bit incomplete to, as it fails to address the problem statement from the summary. >From the summary: "...it is not clear whether to use the "abuse-mailbox:" attribute, the "remark:" attribute or an irt object.". What is supposed to happen to IRT objects, or data from them? For existing records: at the very least it should be explicit which tags should no longer be used or would be deprecated / removed in order to give clear guidance. Another point: if the general idea of the policy is acceptable, wouldn't it be nice to have 2 abuse mailboxes: one for humans, one for bots? Best, Gilles -- Fondation RESTENA - DNS-LU 6, rue Coudenhove-Kalergi L-1359 Luxembourg tel: (+352) 424409 fax: (+352) 422473

25 73

Re: [anti-abuse-wg] 2011-06 New Policy Proposal (Abuse Contact Management in the RIPE NCC Database)
by Leo Vegoda 30 Jan '12

30 Jan '12

Hi, The proposed policy text includes: "The role objects used for abuse contact information will be required to contain a single "abuse-mailbox:" attribute which is intended for receiving automatic and manual reports about abusive behavior originating the resource holders' networks." Do the proposers intend the requirement for the "abuse-mailbox:" attribute to be enforced in any way and if so, how? Thanks, Leo

11 35

Re: [anti-abuse-wg] 2011-06 New Policy Proposal (Abuse ContactManagement in the RIPE NCC Database)
by Briaut perso 04 Dec '11

04 Dec '11

Hello ! I speak french only René BRIAUT 115 Cours Fauriel 42100 SAINT ETIENNE ( 04.77.46.96.07 et 06.07.61.29.49 rbriaut(a)wanadoo.fr -----Message d'origine----- De : anti-abuse-wg-bounces(a)ripe.net [mailto:anti-abuse-wg-bounces@ripe.net] De la part de Emilio Madaio Envoyé : mercredi 23 novembre 2011 14:47 À : policy-announce(a)ripe.net Cc : anti-abuse-wg(a)ripe.net Objet : [anti-abuse-wg] 2011-06 New Policy Proposal (Abuse ContactManagement in the RIPE NCC Database) Dear Colleagues, A new RIPE Policy Proposal has been made and is now available for discussion. You can find the full proposal at: http://www.ripe.net/ripe/policies/proposals/2011-06 We encourage you to review this proposal and send your comments to <anti-abuse-wg(a)ripe.net> before 21 December 2011. Regards Emilio Madaio Policy Development Officer RIPE NCC

3 2

Spesific area of concern on WHOIS data.. "PE "
by Huopio Kauto 29 Nov '11

29 Nov '11

I have seen a lot of malicious activity concentrated on IP resources allocated to parties identifying as "PE Nnnnnn Nnnnnnnn", something like a private enterprise. I would like to recommend a spesific constintency check on all resources allocated to parties identifying themselves with a name starting with "PE ".. --Kauto

2 1

Re: [anti-abuse-wg] 2011-06 New Policy Proposal (Abuse Contact Management in the RIPE NCC Database)
by Tobias Knecht 29 Nov '11

29 Nov '11

Hello all, thanks for the already ongoing discussion about the new abuse contact policy proposal. I will try to clarify some things. We had some really technical discussions about this with database people from RIPE NCC and came up with this idea. So let's have a look at it. If we use a person object as an example, this person object can be referenced for example by an admin-c or tech-c attribute at the moment. In future it can be referenced by the abuse-c as well, BUT to create this reference the person objects needs to have an abuse-mailbox attribute. If there is no abuse-mailbox attribute it can not be referenced by the abuse-c. This will be done by the business logic. Same when you query for an ip range - admin-c, tech-c and abuse-c can be the same person, but output will show an abuse-mailbox attribute in the abuse-c part. So at the end it is only a matter, if the attributes requested by the business rules are existing for the intended use of the object. I will answer the other questions on the mailing list directly. Just wanted to give a real quick overview about the technical idea of the Task Force and RIPE NCC. Thanks, Tobias -- abusix

6 7

Re: [anti-abuse-wg] 2011-06 New Policy Proposal (Abuse Contact Management in the RIPE NCC Database)
by Aftab Siddiqui 24 Nov '11

24 Nov '11

It states "The syntax will make this an optional attribute". We are dealing with inconsistent records even making it mandatory in the APNIC region. How would it help? or I didn't understand properly, can anyone elaborate? Regards, Aftab A. Siddiqui On Wed, Nov 23, 2011 at 6:46 PM, Emilio Madaio <emadaio(a)ripe.net> wrote: > > Dear Colleagues, > > A new RIPE Policy Proposal has been made and is now available for > discussion. > > You can find the full proposal at: > > http://www.ripe.net/ripe/policies/proposals/2011-06 > > We encourage you to review this proposal and send your comments to > <anti-abuse-wg(a)ripe.net> before 21 December 2011. > > Regards > > Emilio Madaio > Policy Development Officer > RIPE NCC > > >

3 3

Re: [anti-abuse-wg] 2011-06 New Policy Proposal (Abuse Contact
by Adrian 24 Nov '11

24 Nov '11

On Thu, Nov 24, 2011 at 03:17:16PM +0100, Dipl-Inform. Frank Gadegast wrote: hi, > What is "Trusted Introducer" ? > Do you mean trusted-introducer.org ? Yes. > How can this "punish" bad LIRs ? RIPE is not involved in that. Sorry, this wasn't meant to "punish" bad LIRs, but to find (and maintain) the relevant contact informaton in terms of abuse handling. Cheers, Adrian

1 0

"www.canay.tv" is doing privacy violation
by eser rüzgar 24 Nov '11

24 Nov '11

Hey All, We are Eren AMBARKÜTÜK's lawyers. We tracked "www.canay.com" domain name for a long time. because, that domain name was published some photo which related our client's photo. At the end of the story, The Turkey Telecommunications Office was gave a notification "www.canay.com" because of our claim about privacy violation of Eren AMBARKÜTÜK's fotographs. Now, we can access the same photos with "www.canay.tv". Your company is service provider of www.canay.tv and we kindly claming you that remove that domin name.if not, we have to sue www.canay.tv and their service provider. You can see the links which include abuse usages as follow: 1. http://www.canay.tv/category/ebru-salli-frikik-video-ebruli-tv8/ 2. http://www.canay.tv/2011/03/22/ebru-salli-ve-eren-ambarkutukle-pilates-ebru… 3. http://www.canay.tv/2011/05/24/eren-ambarkutuk-gogus-pilates-ebruli/ 4. http://www.canay.tv/2011/04/22/eren-ambarkutuk-tangasi-ve-ayrintilari-ebrul… 5. http://www.canay.tv/2011/05/09/eren-ambarkutuk-pilates-guzeli-ebruli/ 6. http://www.canay.tv/2011/03/31/eren-ambarkutukten-pilates-teknikleri-ebruli/ 7. http://www.canay.tv/2011/07/28/eren-ambarkutuk-bacaklar-ve-pilates-ebruli/ 8. http://www.canay.tv/2011/04/26/eren-ambarkutuk-nefes-al-nefes-ver-ebruli/ 9. http://www.canay.tv/2011/06/21/eren-ambarkutuk-seffaf-tayt-cameltoe-ebruli/ Eser RÜZGAR Attornet at Law at İstanbul Bar Association Trade Mark Expert at Turkish Patent Institute

4 3

Re: [anti-abuse-wg] 2011-06 New Policy Proposal (Abuse Contact Management in the RIPE NCC Database)
by Florian Weimer 23 Nov '11

23 Nov '11

> http://www.ripe.net/ripe/policies/proposals/2011-06 Is this the outcome of the task force? What is the exact benefit over just changing the WHOIS server to synthesize abuse-mailbox: fields on inetnum: objects? That the new fields are not optional anymore? -- Florian Weimer <fweimer(a)bfk.de> BFK edv-consulting GmbH http://www.bfk.de/ Kriegsstraße 100 tel: +49-721-96201-1 D-76133 Karlsruhe fax: +49-721-96201-99

1 0

2011-06 New Policy Proposal (Abuse Contact Management in the RIPE NCC Database)
by Emilio Madaio 23 Nov '11

23 Nov '11

Dear Colleagues, A new RIPE Policy Proposal has been made and is now available for discussion. You can find the full proposal at: http://www.ripe.net/ripe/policies/proposals/2011-06 We encourage you to review this proposal and send your comments to <anti-abuse-wg(a)ripe.net> before 21 December 2011. Regards Emilio Madaio Policy Development Officer RIPE NCC

1 0