[98302] in North American Network Operators' Group
Re: Questions about populating RIR with customer information.
daemon@ATHENA.MIT.EDU (Florian Weimer)
Thu Aug 2 01:40:49 2007
From: Florian Weimer <fw@deneb.enyo.de>
To: Drew Weaver <drew.weaver@thenap.com>
Cc: "'nanog@merit.edu'" <nanog@merit.edu>
Date: Thu, 02 Aug 2007 07:15:23 +0200
In-Reply-To: <B7152C470C9BF3448ED33F16A75D81C14D04152A29@exchanga.thenap.com>
(Drew Weaver's message of "Wed, 1 Aug 2007 09:47:45 -0400")
Errors-To: owner-nanog@merit.edu
* Drew Weaver:
> Up until recently, we were only providing the RIR database with
> information about our larger allocations /24 or larger. We have
> noticed however that many anti-spam organizations such as Spamhaus,
> and Fiveten will use the lack of information regarding an IP
> allocation as a blank check to blacklist entire /24s when they are
> really targeting a single /30 or a /29.
I don't know how this translates to actual blacklist entries, but for
submitting complaints, blacklist operators ignore the smaller
networks, whether they are in WHOIS or not. I would also expect that
if you've got a significant spamming problem, some blacklists will try
to entice *you* to do something about it proactively. Overblocking is
often used for that purpose.