<p class="MsoPlainText" style="MARGIN: 0in 0in 0pt"><font size="3"><font face="Arial" size="2">Dear Tobias,</font></font></p>
<div class="MsoPlainText" style="MARGIN: 0in 0in 0pt"><font size="3"><font face="Arial" size="2"></font></font> </div>
<div class="MsoPlainText" style="MARGIN: 0in 0in 0pt">Thank you for your proposal.</div>
<div class="MsoPlainText" style="MARGIN: 0in 0in 0pt"> </div>
<p class="MsoPlainText" style="MARGIN: 0in 0in 0pt"><font size="3"><font face="Arial" size="2">Please re-draft your proposal in line with the template at: <a href="http://www.afrinic.net/policy.htm">http://www.afrinic.net/policy.htm</a>. You can then re-submit the draft with a note on any changes.</font></font></p>
<p class="MsoPlainText" style="MARGIN: 0in 0in 0pt"><font size="3"><font face="Arial" size="2"></font></font> </p>
<p class="MsoPlainText" style="MARGIN: 0in 0in 0pt"><font size="3"><font face="Arial" size="2">Regards,</font></font></p>
<p class="MsoPlainText" style="MARGIN: 0in 0in 0pt"><font size="3"><font face="Arial" size="2"> </font></font></p>
<p class="MsoPlainText" style="MARGIN: 0in 0in 0pt"><font size="3"><font face="Arial" size="2">Vincent Ngundi</font></font></p>
<p class="MsoPlainText" style="MARGIN: 0in 0in 0pt"><font size="3"><font face="Arial" size="2">Chair, AfriNIC PDP-MG<br></font></font></p>
<div class="gmail_quote">2010/4/6 Tobias Knecht <span dir="ltr"><<a href="mailto:tk@abusix.org">tk@abusix.org</a>></span><br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">Hello Policy Working Group,<br><br>my name is Tobias Knecht. I'm the CEO of abusix UG and I'm new here in<br>
this group.<br><br>Nevertheless I wanna propose a new policy to you.<br>I have done a similar proposal for APNIC already<br>(<a href="http://www.apnic.net/policy/proposals/prop-079" target="_blank">http://www.apnic.net/policy/proposals/prop-079</a>)<br>
<br>This proposal found common consensus on the last APNIC meeting and it<br>looks like as if will be implemented in this way, starting this year.<br><br>So please have a look at the proposal and feel free to ask or mention<br>
your ideas or changes.<br><br><br>The proposal is based on the idea that the AfriNIC whois database is the<br>same as RIPE and APNIC are using. That means IRT-Objects and<br>abuse-mailbox attributes are already implemented and just need to be<br>
used. That makes things easier and faster.<br><br><br>________________________________________________________________________<br><br>Proposal Name: Abuse contact information<br>________________________________________________________________________<br>
<br><br>Author: Tobias Knecht<br> <<a href="mailto:tk@abusix.org">tk@abusix.org</a>><br><br>Version: 1<br><br>Date: 06 April 2010<br><br><br><br>1. Introduction<br>----------------<br><br>This is a proposal to introduce a mandatory reference to IRT objects<br>
in the inetnum, inet6num and aut-num objects in the AfriNIC Whois Database.<br>It provides a more accurate and efficient way for abuse reports to reach<br>the correct network contact.<br><br><br>2. Summary of current problem<br>
------------------------------<br><br>Network owners increasingly operate dedicated abuse<br>handling departments, distinct from the basic operations department.<br><br>More and more network owners and other institutions are also starting<br>
to exchange data about abusive behavior with each other, to more quickly<br>allow networks to identify internal abuse, external abuse, and other<br>security problems.<br><br>Currently within the AfriNIC region, the growing amount of abuse reports<br>
are sent to e-mail address specified in the e-mail field, as encouraged<br>on the AfriNIC website.[1] These addresses are used because the AfriNIC<br>Whois Database currently has no mandatory, specialised contact object<br>
for abuse departments. Instead, all abuse reports are sent to contact<br>that is has broader responsibilities or different responsibilities.<br><br><br>3. Situation in other RIRs<br>---------------------------<br><br>APNIC:<br>
<br> This policy proposal found consensus at APNIC 29 in Kuala Lumpur<br> March 4th 2010. Further information about the APNIC policy proposal<br> can be found at [2]<br><br><br>ARIN:<br><br> An abuse-POC exists for Organizational ID identifiers.[3]<br>
<br><br>LACNIC:<br><br> An abuse-c exists for aut-num, inetnum and inet6num objects.[4]<br><br><br>RIPE:<br><br> An optional IRT (Incident Response Team) object can be linked to<br> inetnum and inet6num objects.[5] If the current proposal is<br>
successful in the APNIC and AfriNIC region, the author plans to<br> submit a similar proposal for the RIPE region.<br><br><br>4. Details of the proposal<br>---------------------------<br><br>It is proposed that AfriNIC:<br>
<br>4.1 Institute a mandatory reference to an IRT object in inetnum,<br> inet6num and aut-num objects.<br><br> In terms of implementing a mandatory IRT reference, it is<br> suggested that this be part of two, established actions:<br>
<br> - The next time an organization attempts to update an existing<br> inetnum, inet6num or aut-num object<br><br> - When new inetnum, inet6num or aut-num objects are added to the<br> database<br><br><br>4.2 Have a mandatory abuse-mailbox field in the IRT object.<br>
<br><br>4.3 Delete abuse-mailbox fields in all objects that do not define an<br>IRT, and delete the trouble field everywhere mid 2011.<br><br><br>5. Advantages and disadvantages of the proposal<br>------------------------------------------------<br>
<br>5.1 Advantages<br><br> - Networks will be able to supply their own, direct contact<br> information for abuse departments.<br><br> - Abuse complaints will not be sent to the "wrong" contact any<br> more.<br>
<br> - This permits greater administrative and operational flexibility,<br> and faster abuse handling will be possible.<br><br><br>5.2 Disadvantages<br><br> - Introducing a mandatory reference to the IRT Object will establish<br>
a new object. This object, like all other existing objects, will<br> face the data accuracy problem. This proposal aims to address the<br> issue of a missing place for abuse contact information and will<br> not improve data accuracy in the whois database. Data accuracy<br>
will be part of another proposal that is already being discussed<br> on the APNIC and RIPE policy mailing list.<br><br><br><br>6. Effect on AfriNIC members<br>---------------------------<br><br>There will be no immediate affect for AfriNIC members with existing<br>
resource registrations already in the AfriNIC Whois Database.<br><br>However, members will need to add a reference to the mandatory IRT<br>object in the following situations:<br><br> - The first time members attempt to update an existing inetnum,<br>
inet6num or aut-num object<br><br> - When members add new inetnum, inet6num or aut-num objects<br><br>7. References<br>--------------<br><br>[1] Finding contacts for an IP address<br> <a href="http://www.afrinic.net/Registration/spam.htm" target="_blank">http://www.afrinic.net/Registration/spam.htm</a><br>
<br>[2] prop-079: Abuse contact information<br> <a href="http://www.apnic.net/policy/proposals/prop-079" target="_blank">http://www.apnic.net/policy/proposals/prop-079</a><br><br>[3] Introduction to ARIN's Database<br>
<a href="https://www.arin.net/knowledge/database.html#abusepoc" target="_blank">https://www.arin.net/knowledge/database.html#abusepoc</a><br><br>[4] There is no formal documentation on abuse-c in inetnum and inet6num<br>
objects, but for documentation on the abuse-c in ASN records, see<br> LACNIC Policy Manual (v1.3 - 07/11/2009)<br> <a href="http://lacnic.net/en/politicas/manual4.html" target="_blank">http://lacnic.net/en/politicas/manual4.html</a><br>
<br>[5] IRT Object FAQ<br> <a href="http://www.ripe.net/db/support/security/irt/faq.html" target="_blank">http://www.ripe.net/db/support/security/irt/faq.html</a><br><br><br><br><br><br><br>--<br><font color="#888888">| Tobias Knecht | CEO | abusix UG (haftungsbeschraenkt)<br>
| <a href="mailto:tk@abusix.com">tk@abusix.com</a> | <a href="http://abusix.com/" target="_blank">http://abusix.com</a><br>| Postfach 210127 | 76151 Karlsruhe | Germany<br>| ---<br>| Register of Companies(Handelsregister): HRB 707959<br>
| District of Court(Amtsgericht) Mannheim/Germany<br>| Registered Office: Karlsruhe/Germany<br>| CEO: Tobias Knecht<br><br></font><br>_______________________________________________<br>rpd mailing list<br><a href="mailto:rpd@afrinic.net">rpd@afrinic.net</a><br>
<a href="https://lists.afrinic.net/mailman/listinfo.cgi/rpd" target="_blank">https://lists.afrinic.net/mailman/listinfo.cgi/rpd</a></blockquote></div><br>