Re: Repeated Blacklisting / IP reputation

[Zaid Ali <zaid () zaidali com>]

I think costs of maintaining an abuse helpdesk is a big factor here. I  
don't see many ISP's putting money and resources into an abuse  
helpdesk and this is because it is low cost to obtain a Netblock so  
why should one employ and build expertise on managing it. If you go to  
SpamHaus you will see a major ISP and their netblocks listed and  
associated with known spammers. What is this ISP doing about this?  
Nothing!  My guess is that they look at their bottom $$ and look at  
Spamming customer A and say "crap we will be spending $$$ on this  
customer just to get them off SpamHaus so just leave it, we are  
afterall in the bandwidth business". If ARIN were to say to this major  
ISP that they wont allocate more addresses to them until they adhere  
to an AUP then maybe the game will change but the bigger question here  
is should ARIN get into this kind of policy.

Zaid


On Sep 15, 2009, at 1:31 PM, Christopher Morrow wrote:

> On Tue, Sep 15, 2009 at 4:23 PM,  <Valdis.Kletnieks () vt edu> wrote:
> > On Tue, 15 Sep 2009 08:01:48 PDT, Shawn Somers said:
> >
> > >   Anyone that intentionally uses address space in a manner that they
> > > know will cause it to become contaminated should be denied on any
> > > further address space requests.
> >
> > You *do* realize that the people you're directing that paragraph at  
> > are
> > able to say with a totally straight face: "We're doing nothing  
> > wrong and
> > we have *no* idea why we end up in so many local block lists"?
>
> Also, you can very well disable new allocations to Spammer-Bob, did
> you also know his friend Sue is asking now for space? Sue is very
> nice, she even has cookies... oh damn after we allocated to her we
> found out she's spamming :(
>
> Spammers have a lot of variables to change in this equation, RIR's
> dont always have the ability to see all of the variables, nor
> correlate all of the changes they see :(
>
> -Chris