[176204] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: abuse reporting tools

daemon@ATHENA.MIT.EDU (Franck Martin)
Wed Nov 19 13:20:21 2014

X-Original-To: nanog@nanog.org
From: Franck Martin <fmartin@linkedin.com>
To: John Kristoff <jtk@cymru.com>
Date: Wed, 19 Nov 2014 18:19:50 +0000
In-Reply-To: <20141119111419.2877e52e@localhost>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org

--Apple-Mail=_6A0CE8C8-3070-4320-A30B-61B12938B429
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii


On Nov 19, 2014, at 9:14 AM, John Kristoff <jtk@cymru.com> wrote:

> On Tue, 18 Nov 2014 16:58:24 -0800
> Mike <mike-nanog@tiedyenetworks.com> wrote:
>=20
>=20
>> I am wondering if anyone has a pointer or reference to any tools
>> which might help facillitate this?
>=20
> I can point you to some tools and references I'm aware of, but I can't
> talk about how effectively they are operationally or whether or not =
you
> should abide by or use them.
>=20
>  AbuseHelper
>  <http://abusehelper.be/>
>=20
>  IETF RFC 5965 An Extensible Format for Email Feedback Reports
>  <https://tools.ietf.org/html/rfc5965>
>=20
>  IETF RFC 6650 Creation and Use of Email Feedback Reports
>  <https://tools.ietf.org/html/rfc6650>
>=20
>  Network Abuse Reporting 2.0
>  <http://www.x-arf.org/>
>=20
>  Net::Abuse::Utils
>  <http://search.cpan.org/~mikegrb/Net-Abuse-Utils/>
>=20
You can also use this facility to find the abuse email address of an IP
https://abusix.com/contactdb.html

And I wrote this tool, tailored for DMARC failure reports, but it has =
some code to report any email. Yo could hack the code easily for your =
own purposes:
https://github.com/linkedin/lafayette/


--Apple-Mail=_6A0CE8C8-3070-4320-A30B-61B12938B429
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="signature.asc"
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Message signed with OpenPGP using GPGMail

-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org

iQEbBAEBCgAGBQJUbNzMAAoJEJHd9Bbysc+a+GcH8wdn8zGd2Vj1pmqfHRSf/QT5
frwvwuIHzwgcuLGU9Kv4r1kKW3H8QvWKnuokc3fsWhjSX21It+vkSR3sQeoO40pW
z8T5GekKloMlC+xCC6oq61L3fJQMBdXLOmKa6qXCQiIH4Q8Ztr4gwG1s9gC1LSqz
BA86h06JdzNUDhNOAoWzbuaUhny0vtuNgIlAE7jH2LdN0mfkLwr+1fJhS5vsh/Mj
ucYWLkBCfkJWGkoUav0Sl9FwUcrsrXRvYXEZqeqMz/5cAPs0c8n2htENe2fxGyJ2
bejerg1SRIIhmHjkZgqAWGZFySsIZUfBUzYcZtzqOKrF0P2m5ksuOXHogAJk0g==
=y7MA
-----END PGP SIGNATURE-----

--Apple-Mail=_6A0CE8C8-3070-4320-A30B-61B12938B429--

home help back first fref pref prev next nref lref last post