Hi all, I like to raise questions about what kind of responsibilities an abuse contact should have and look forward for comments or experiences you have with other providers. We currently have a case with a bigger hosting company (mostly doing serverhousing) from the RIPE region. They have one abuse contact with one single abuse mailaddress for all IPs and rather big netblocks used for serverhousing. We had to find out, that the only thing they do with incoming abuse reports, is to forward them to their customers which actually rent the equipment. The don't try to find the security hole themself, the don't block outgoing email from intruded and misused servers, they do nothing but this forwarding. Surely, the end customers are not familiar with intrusion detection, have no UNIX/Windows skills and have no background knowledge, they can mostly work a servers control panel, and that's it. The provider is surely to lazy to insert an abuse contact for every customer he has. So: - should an ISP not try to work out any abuse problem together with the customer, if the abuse contact address is his ? - should he not be forced to enter different abuse contacts to RIPEs DB, if he does not want to work the cases ? - is there already any kind of regulation, what an abuse contact has to do ? - if not, should there be one ? Kind regards, Frank -- PHADE Software - PowerWeb http://www.powerweb.de Inh. Dipl.-Inform. Frank Gadegast mailto:frank@powerweb.de Schinkelstrasse 17 fon: +49 33200 52920 14558 Nuthetal OT Rehbruecke, Germany fax: +49 33200 52921 ======================================================================