[103820] in North American Network Operators' Group
Re: Abuse response [Was: RE: Yahoo Mail Update]
daemon@ATHENA.MIT.EDU (Suresh Ramasubramanian)
Tue Apr 15 03:48:15 2008
Date: Tue, 15 Apr 2008 12:31:33 +0530
From: "Suresh Ramasubramanian" <ops.lists@gmail.com>
To: "Paul Ferguson" <fergdawg@netzero.net>
Cc: nanog@merit.edu, szlists@szarka.org
In-Reply-To: <20080414.232508.289.5@webmail24.vgs.untd.com>
Errors-To: owner-nanog@merit.edu
On Tue, Apr 15, 2008 at 11:55 AM, Paul Ferguson <fergdawg@netzero.net> wrote:
> Really.
>
> How many people are actually doing IODEF?
>
> http://www.terena.org/activities/tf-csirt/iodef/
AISI - for example - and AISI feeds the top 25 australian ISPs - takes
IODEF as an input
And MAAWG does ARF, quite simple to use as well .. but they would take
a standard format (with an RFC yet) if you and some other major
players
1. Offer iodef (or say ARF) feeds
2. Tell them youre offering these feeds
> It should be simple -- not require a freeking full-blown "standard".
Its a standard. And it allows automated parsing of these complaints.
And automation increases processing speeds by orders of magnitude..
you dont have to wait for an abuse desker to get to your email and
pick it out of a queue with hundreds of other report emails, and
several thousand pieces of spam [funny how abuse@domain type addresses
end up in so many spammer lists..]
srs
