September 2018 - anti-abuse-wg

Re: [anti-abuse-wg] Decision on Proposal 2017-02
by Name 19 Feb '19

19 Feb '19

9 11

What to do when "abuse" email address does not work?
by Badguys Killer 04 Jan '19

04 Jan '19

I have found that many "abuse" email addresses indicated in WHOIS databases actually are fake e-addresses. One of them is gestionip(a)TELEFONICA.NET.PE (because my company has received many many spams originated from its network so I wrote a spam complaint to this e-address but the mail was rejected for non-existent mailbox!) What can we do in this case? Thanks

6 6

Re: [anti-abuse-wg] When email verification behavior is abusive
by Richard Clayton 01 Oct '18

01 Oct '18

In message , ac <ac(a)main.me> writes >ESP and email relay services should verify recipient email addresses >prior to sending bulk emails to any random email address. > >ESPs that simply start dumping bulk emails on victims often end up >listed on RBLs for abusive behavior. > >But, when is verification emails themselves, spamvertising or email abuse? when people don't want them in their mailbox in a world of machine learning and email flows measured in the tens of billions, the only practical way of identifying abuse is to examine user feedback ... ... if you're not in the billions regime then you can try and write down complex rules to guide your users and your abuse teams, but even then flexibility is key because otherwise you end up arguing with an abuser who is skating just on the right side of some arbitrary value >Our own email policy defines verification abuse as "more than 3 verify >your email account" emails in the same 24 hour period and verify your >email account emails lasting longer than five 24 hour periods. > >Do you think this is reasonable? Too reasonable? More? Less? it depends on the size of the company/mailing list ... 3 new signups in a day may be a red letter day, or it may merely indicate that something broke at thirteen minutes past midnight >If you receive say 4 "verify your email account" emails in 5 minutes, >is this abuse? this question suggests that you might be seeing an outer ripple of an incident which is the modern form of mail bombing this is where users receive tens of thousands of verification emails in a hour or so ... sometimes this is just because the user is disliked, but it can be an attempt to hide other transactional email (associated with fraud or domain name theft) amongst all the noise few mail systems provide suitable tools to end users to deal with this regrettably few sign-up systems have (even weak) CAPTCHA systems to prevent automated attacks.... (something which an ISP providing hosting might usefully start requiring of its customers : rather more practical than trying to set some arbitrary number on emails sent) there is a proposal for assisting with automated filtering https://tools.ietf.org/html/draft-levine-mailbomb-header-01 but it's not currently getting all that much traction. -- richard Richard Clayton Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. Benjamin Franklin 11 Nov 1755

4 5

Agenda & WG Chair Selection Reminder
by Brian Nisbet 28 Sep '18

28 Sep '18

Colleagues, The RIPE meeting is now just a few short weeks away. Our current agenda is here: https://ripe77.ripe.net/programme/meeting-plan/aa-wg/ There is still space in the meeting if you wish to discuss or propose any topics. As mentioned, Tobias' term ends at this meeting and if anyone would like to nominate themselves for the Co-Chair position, please email me with some information about yourself before Friday 12th October, when I'll publish the candidate information and we'll discuss at the meeting on Thursday 18th. Thanks, Brian Co-Chair, RIPE AA-WG Brian Nisbet Network Operations Manager HEAnet CLG, Ireland's National Education and Research Network 1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

1 0

RIPE Policy Proposal 2018-05 Aims to Publish Legal Address Information
by Marco Schmidt 27 Sep '18

27 Sep '18

Dear colleagues, We just published the RIPE Policy proposal, 2018-05, "Publication of Legal Address of Internet Number Resource Holder", to the RIPE NCC Services Group mailing list. The goal of the proposal is for the RIPE NCC to publish the validated legal address information of holders of Internet number resources. As the publishing of such data will likely have relevance in fighting abuse, we want to notify the Anti-Abuse Working Group. You can find the full proposal at: https://www.ripe.net/participate/policies/proposals/2018-05 We encourage you to review this proposal and send your comments to <ncc-services-wg(a)ripe.net> before 26 October 2018. Kind regards, Marco Schmidt Policy Officer RIPE NCC Sent via RIPE Forum -- https://www.ripe.net/participate/mail/forum

1 0

Draft Agenda, AA-WG Session, RIPE 77
by Brian Nisbet 18 Sep '18

18 Sep '18

Colleagues, Please find the draft agenda below. We still have some time during the meeting, so please do let the Chairs know if you have something you'd like to present. A. Administrative Matters * Welcome * Scribe, Jabber, Stenography * Microphone Etiquette * Approve Minutes from RIPE 76 * Finalise agenda B. Update * B1. Working Group Chair Selection * B1. Recent List Discussion C. Policies - D. Interactions - E. Presentation - * E1. Criminal Abuse in RIPE IP Space - Dhia Mahjoub X. A.O.B. Z. Agenda for RIPE 78 Thanks Brian Co-Chair, RIPE AA-WG Brian Nisbet Network Operations Manager HEAnet CLG, Ireland's National Education and Research Network 1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

1 0

Working Group Chair Selection - RIPE 77 Edition
by Brian Nisbet 11 Sep '18

11 Sep '18

Colleagues, Due to the annoyingly predictable nature of linear time, Tobias' 3 year term as AA-WG Co-Chair will come to an end at RIPE 77 in Amsterdam. I would like to invite nominations (and remember, you can nominate yourself or others) via email to me before Friday 12th October. As a reminder, the selection process will conclude at the WG session on Thursday 18th. The AA-WG process prefers consensus, but a vote is possible if consensus cannot be reached amongst the WG. Nominees do not have to be physically present at the WG session. Thank you, Brian Co-Chair, RIPE AA-WG Brian Nisbet Network Operations Manager HEAnet CLG, Ireland's National Education and Research Network 1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

1 0

Agenda Items - RIPE 77
by Brian Nisbet 10 Sep '18

10 Sep '18

Colleagues, As you're hopefully aware the next RIPE meeting, and so the next meeting of the AA-WG, is just a month away! The AA-WG will be meeting on Thursday 18th October at 11:00 CEST. While I plan to publish a draft agenda shortly, I would ask if anyone has any items they would like to feature at the meeting. This can be policy discussions or proposals, work items, items for general discussion or presentations. Please do let me know if you have anything in mind. Thanks, Brian Co-Chair, RIPE AA-WG Brian Nisbet Network Operations Manager HEAnet CLG, Ireland's National Education and Research Network 1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

1 0

New on RIPE Labs: Let's Connect!
by Mirjam Kuehne 04 Sep '18

04 Sep '18

Dear colleagues, Please find an update of Let's Connect! on RIPE Labs. The main aim of the Let's Connect! project is to develop a secure, fast and usable open-source VPN solution that can be used by anybody on all types of devices. It is one of the projects that has been funded through the RIPE NCC Community Projects Fund: https://labs.ripe.net/Members/rogier_spoor/lets-connect Kind regards, Mirjam Kühne RIPE NCC

1 0