- ripe-list - mailman.ripe.net

Re: SIRCE Funding
by Marco Negri 21 Nov '96

21 Nov '96

Andrea, per favore, fammi sapere qualcosa in piu' su questo SIRCE!!! Potrebbe essere utile contribuire con 500~1000 ECU. Bye Marco At 16.40 19/11/96 +0100, Daniel Karrenberg wrote: > >Dear contributors, dear colleagues, > >the interest in an ISP-driven security incident coordination service is >still much lower than expected. The total of all commitments is less >than 8% of the expected value. If there is no significant change in >this trend before November 27th the RIPE NCC will have to withdraw its >proposal for running the pilot. That is the right thing to do if there >is really little interest. However it is wrong if there is interest but >the right people do not react or get told about this. > >Here is a summary of the commitments so far in the order of receipt. >Thanks to all of the people and organisations below: > >Organisation name Person commit (ECU) > >pi.se AB Pontus Ekman 1000 >ACONET Wilfried Woeber 1000 >RedIRIS-CSIC Victor Castelo 1000 >Academic Computer Centre, CYFRONET-KRAKO Karol Franczak 500 >IPGlobal, Informatica e Telecomunicacoes Pedro Ramalho Carlos 500 >Teleport C&S GmbH. Christoph Maerk 500 >BT Public Internet Service Nigel Roy Titley 1000 >Tele Greenland Michael Schultz 1000 >SpaceNet GmbH Sebastian v. Bomhard 750 >Unisource Business Networks Italy Mauro Magrassi 1000 >Sontheimer Datentechnik GmbH Bernd Sontheimer 500 >ECRC GmbH Dave Morton 1000 >Tele2/SWIPnet Jorgen Ericsson 1000 >Nacamar Klaus Landefeld 1000 > ----- > > Total: 11750 > > > -- Marco Negri - I.NET High Quality ISP Phone : +39-2-40906 ext 1 I.NET e' associata ad AIIP Fax : +39-2-40906 ext 262 I-20153 V. Caldera, 21 - Milano, Italy e-mail : Marco.Negri(a)INet.It

1 0

SV: SIRCE: Action Needed !
by Kenneth Hybner 19 Nov '96

19 Nov '96

%START %FORM [sirce9601] I herby commit to contribute the ECU amount indicated to the SIRCE pilot project as defined in ripe-150 and the documents it refers to. I confirm that I have authority to commit my organisation for this contribution. I expect to be invoiced for this contribution as soon as the project will have started. Please put information between the brackets. Please give your full name. %NAME [Kenneth Hybner] Please give your position in the organisation. %POS [President] Specify the registry ID of your organisation if it has one. %REGID [se.hogianet] If you have *not* specified a registry ID above, please give the full organisation name and billing address. We will contact you for more details if necessary. %ORGNAME [] %ADDRESS [] Committed amount in ECU. Minimum is ECU 500. Excludes VAT where applicable. %AMOUNT [1000] Any billing reference that you may wish to be mentioned on the invoice. %BILLREF [RIPE/SIRCE] %END

1 0

SIRCE Funding
by Daniel Karrenberg 19 Nov '96

19 Nov '96

Dear contributors, dear colleagues, the interest in an ISP-driven security incident coordination service is still much lower than expected. The total of all commitments is less than 8% of the expected value. If there is no significant change in this trend before November 27th the RIPE NCC will have to withdraw its proposal for running the pilot. That is the right thing to do if there is really little interest. However it is wrong if there is interest but the right people do not react or get told about this. Here is a summary of the commitments so far in the order of receipt. Thanks to all of the people and organisations below: Organisation name Person commit (ECU) pi.se AB Pontus Ekman 1000 ACONET Wilfried Woeber 1000 RedIRIS-CSIC Victor Castelo 1000 Academic Computer Centre, CYFRONET-KRAKO Karol Franczak 500 IPGlobal, Informatica e Telecomunicacoes Pedro Ramalho Carlos 500 Teleport C&S GmbH. Christoph Maerk 500 BT Public Internet Service Nigel Roy Titley 1000 Tele Greenland Michael Schultz 1000 SpaceNet GmbH Sebastian v. Bomhard 750 Unisource Business Networks Italy Mauro Magrassi 1000 Sontheimer Datentechnik GmbH Bernd Sontheimer 500 ECRC GmbH Dave Morton 1000 Tele2/SWIPnet Jorgen Ericsson 1000 Nacamar Klaus Landefeld 1000 ----- Total: 11750

1 0

New Document available: RIPE-152
by RIPE NCC Document Annoucement Service 18 Nov '96

18 Nov '96

New/Revised RIPE Document Announcement -------------------------------------- A revised/new document is available from the RIPE document store. Ref: ripe-152 Title: Charging by Local Internet Registries Author: M. Norris, D. Karrenberg Date: 22 Apr 1996 Accessing the RIPE document store --------------------------------- You can access the RIPE document store via the World Wide Web; RIPE-152 is not available from the WWW at this moment, but will be soon, at the following URL: http://www.ripe.net/docs/ripe-152.html The RIPE document store is also available via anonymous FTP to ftp.ripe.net, in the directory ripe/docs. The full filenames of the new documents on the FTP-server are: ripe/docs/ripe-152.ps for the PostScript version ripe/docs/ripe-152.txt for the plain text version Documents can also be retrieved from the RIPE document store using a mail server program. For more information on how to use the program, send email to <mail-server(a)ripe.net> with "send HELP" in the body text.

1 0

Re: Re: SIRCE: Action Needed !
by RIPE NCC Billing Department 18 Nov '96

18 Nov '96

Dear Dave Morton, Thank you for committing to fund the SIRCE pilot project. We have received your data as follows: Name: Dave Morton Position: still trying to figure it out ! Registry ID: de.ecrc Organisation: ECRC GmbH Address: Arabellastr. 17, 81925 Munich, Germany Committed amount (ECU): 1000 Billing reference: RIPE/SIRCE Your registration has been successful. Kind regards, Roderik Muit RIPE NCC Billing Department

1 0

Re: SIRCE: Action Needed !
by Dave Morton 16 Nov '96

16 Nov '96

%START %FORM [sirce9601] I herby commit to contribute the ECU amount indicated to the SIRCE pilot project as defined in ripe-150 and the documents it refers to. I confirm that I have authority to commit my organisation for this contribution. I expect to be invoiced for this contribution as soon as the project will have started. Please put information between the brackets. Please give your full name. %NAME [Dave Morton] Please give your position in the organisation. %POS [still trying to figure it out !] Specify the registry ID of your organisation if it has one. %REGID [de.ecrc] If you have *not* specified a registry ID above, please give the full organisation name and billing address. We will contact you for more details if necessary. %ORGNAME [ECRC GmbH] %ADDRESS [Arabellastr. 17, 81925 Munich, Germany] Committed amount in ECU. Minimum is ECU 500. Excludes VAT where applicable. %AMOUNT [1000] Any billing reference that you may wish to be mentioned on the invoice. %BILLREF [RIPE/SIRCE] %END

1 0

Re: Re: SIRCE Funding Message
by RIPE NCC Billing Department 15 Nov '96

15 Nov '96

Dear Olle F. Wallner, Thank you for committing to fund the SIRCE pilot project. We have received your data as follows: <zilch> Unfortunately there has been an error in your registration: --- Position not specified. (%POS) --- Please re-send your registration after correcting the error. If you have any questions, please contact <billing(a)ripe.net>. Kind regards, Roderik Muit RIPE NCC Billing Department > >Please use the form below to make commitments and pass this message on >to those who might be interested to participate. Of course I will be >happy to answer any questions you may have. > >With thanks in advance for your support > >Daniel Karrenberg > >------ > >%START > >%FORM [sirce9601] > >I herby commit to contribute the ECU amount indicated to the >SIRCE pilot project as defined in ripe-150 and the documents >it refers to. I confirm that I have authority to commit >my organisation for this contribution. I expect to be invoiced >for this contribution as soon as the project will have started. > >Please put information between the brackets. > >Please give your full name. > >%NAME [ Olle F. Wallner ] > >Please give your position in the organisation. > >%POS [ ] > >Specify the registry ID of your organisation if it has one. > >%REGID [ se.swipnet] > >If you have *not* specified a registry ID above, please give the >full organisation name and billing address. We will contact >you for more details if necessary. > >%ORGNAME [ ] > >%ADDRESS [ ] > >Committed amount in ECU. Minimum is ECU 500. Excludes VAT where applicable. > >%AMOUNT [ 1000] > >Any billing reference that you may wish to be mentioned on the invoice. > >%BILLREF [ ] > >%END

1 0

Re: SIRCE Funding Message
by Olle F. Wallner 15 Nov '96

15 Nov '96

Tele2 commits to the funding at ECU 1,000. --Olle At 13:23 05/11/96 +0100, Daniel Karrenberg wrote: > >Dear Contributor, > >The RIPE NCC has proposed to execute a pilot project to provide Security >Incident Response Coordination in Europe (SIRCE) starting in early 1997. >In the past this has sometimes be called the Euro-CERT. We made this >proposal assuming that there is a need for such a service among the >European ISPs, i.e. the current customers of the RIPE NCC. Now that >the proposal has been published as document ripe-150, we ask you to >examine it and to commit a financial contribution to the pilot in 1997. >The benefits for those contributing include: > > - Preferred Service > Non-paying customers will only receive service if there is > no outstanding work for paying customers. > > - Influence > Paying customers will determine the general direction, > the policies and the services of SIRCE. > > - Credit > The level of your contribution will be publicly acknowledged. > >The minimum contribution is ECU 500 and there is no maximum. >As explained in the proposal we are looking for an average contribution >around ECU 1000. The contributions will be invoiced once the project >has definitely started. If the project is oversubscribed the amounts >invoiced will be reduced pro rata. Should there be insufficient >commitments to fund the project, we will withdraw our proposal. The >deadline for contributions is November 27th 1996. Until then we will >regularly publish the commitments already made. > >Please use the form below to make commitments and pass this message on >to those who might be interested to participate. Of course I will be >happy to answer any questions you may have. > >With thanks in advance for your support > >Daniel Karrenberg > >------ > >%START > >%FORM [sirce9601] > >I herby commit to contribute the ECU amount indicated to the >SIRCE pilot project as defined in ripe-150 and the documents >it refers to. I confirm that I have authority to commit >my organisation for this contribution. I expect to be invoiced >for this contribution as soon as the project will have started. > >Please put information between the brackets. > >Please give your full name. > >%NAME [ ] > >Please give your position in the organisation. > >%POS [ ] > >Specify the registry ID of your organisation if it has one. > >%REGID [ ] > >If you have *not* specified a registry ID above, please give the >full organisation name and billing address. We will contact >you for more details if necessary. > >%ORGNAME [ ] > >%ADDRESS [ ] > >Committed amount in ECU. Minimum is ECU 500. Excludes VAT where applicable. > >%AMOUNT [ ] > >Any billing reference that you may wish to be mentioned on the invoice. > >%BILLREF [ ] > >%END > >

1 0

SIRCE: Action Needed !
by Daniel Karrenberg 14 Nov '96

14 Nov '96

Dear customers, dear colleagues, I have received quite some questions in response to my funding call for SIRCE. The following FAQ is a summary of the most popular ones. Unfortunately the amount of funds committed so far is a bit disappointing in the light of interest expressed earlier. If people are unhappy about the proposal or any other aspect, please let me know. We cannot fix it if we are not told. Thanks for your consideration. Daniel Karrenberg Q: I have had no time to read all the documents; can you please summarise what SIRCE is? A: SIRCE is a *coordination* service for security incident handling in Europe. SIRCE will *coordinate* the handling of incidents involving more than one of its customers. The *handling* of the incidents itself is performed by the organisations involved and *not* by SIRCE. In addition SIRCE will provide general support services to enable its customers to better handle security relevant incidents. The target customers for SIRCE, as proposed by the NCC, are the European ISPs. SIRCE services and policies will be geared towards ISP needs. Q: Do I need to set up my own Incident Response Team (IRT) in order to use SIRCE services. A: No, you can continue handling incidents like you do at present. SIRCE customers will just be asked to identify contact persons for security incident handling coordination. If you wish, SIRCE will provide support to set up an IRT or to otherwise improve your incident handling capability. Q: What makes SIRCE different from services like the CERT CC? A: SIRCE has local focus because it concentrates on Europe and the ISPs needs in particular. Of course SIRCE will coordinate on a global scale through similar organisations like the CERT CC. Q: Will SIRCE publish details or statistics about incidents in a way that reveals that my organisation was involved? A: No. Sirce will not publish details identifying customers involved without explicit permission. While detailed policies about statistics will be established with input from all customers during the pilot, we do not expect to publish statistics revealing the incident rate of individual customers. Q: Will SIRCE disclose details about incidents and/or my operational procedures to other customers? A: No. Again the detailed policies will be developed during the pilot. We expect these policies to be very conservative. They are likely to prefer direct information exchange between customers handling an incident if sensitive areas are involved. Q: When will SIRCE start operating? A: The project will start in Q1/97 and achieve initial incident coordination capability 2-3 months later. Q: What can I do to help make this happen? A: Commit a contribution to the funding of pilot operations in 1997. The minimum contribution is 500ECU. We are loking for an average of around 1000 ECU. This commitment is for 1997 only and there is no further obligation. Please use the form below for making commitments. Q: What are the benefits if I contribute? A: Direct benefits are preferred service, influence on policies and public credit. An important indirect benefit is that security incidents are well coordinated by an entity that looks after ISPs needs first. Q: Am I bound to my commitment if TERENA decides to execute SIRCE differently than proposed in ripe-150? A: No. The commitment is specifically for the project proposed in ripe-150. If a different proposal is preferred by TERENA, we will provide information about it and it is up to you to decide whether you want to get involved. Q: Which total commitment is necessary for the NCC to do SIRCE? A: The total budgeted expenditure in 1997 is 286kECU. The commitments from the ISP community are needed both to raise the funds necessary for a successful service and to document that the ISPs have a need for it. If the total commitment by November 27th is less than 100kECU there is not sufficient need and the NCC will withdraw. If there are commitments for 150kECU or more the project can go ahead since we expect additional commitments from new NCC customers and funds raised by TERENA. If the total will be between 100kECU and 150kECU it will depend on the distribution of the commitments. Q: What commitments have been received to date? A: Not many, especially when considering the interest expressed earlier. The table below shows all commitments in the order we received them. We will re-publish this list whenever it changes significantly. regid org name commit (ECU) se.pi pi.se AB Pontus Ekman 1000 at.aconet ACONET Wilfried Woeber 1000 es.rediris RedIRIS-CSIC Victor Castelo 1000 pl.cyfronet Academic Computer Centre, Karol Franczak 500 CYFRONET-KRAKOW ---- Total: 3500 ==== Q: How can I get more information? A: Document ripe-150 is the project proposal. ripe-149 is a position paper arguing why the RIPE NCC should execute the project. The service descriptions are in ftp://ftp.ripe.net/ripe/misc/cert-eu.ps. Further questions can be addressed to Daniel Karrenberg <Daniel.Karrenberg@ ripe.net>. ----- Please send the form below to <billing(a)ripe.net>: %START %FORM [sirce9601] I herby commit to contribute the ECU amount indicated to the SIRCE pilot project as defined in ripe-150 and the documents it refers to. I confirm that I have authority to commit my organisation for this contribution. I expect to be invoiced for this contribution as soon as the project will have started. Please put information between the brackets. Please give your full name. %NAME [ ] Please give your position in the organisation. %POS [ ] Specify the registry ID of your organisation if it has one. %REGID [ ] If you have *not* specified a registry ID above, please give the full organisation name and billing address. We will contact you for more details if necessary. %ORGNAME [ ] %ADDRESS [ ] Committed amount in ECU. Minimum is ECU 500. Excludes VAT where applicable. %AMOUNT [ ] Any billing reference that you may wish to be mentioned on the invoice. %BILLREF [ ] %END

1 0

Re: Request for subscription to the mailing list
by Roderik Muit 12 Nov '96

12 Nov '96

Dear people, Even though almost all people subscribed to ripe-mailinglists are service providers and/or experienced Internet users, there appears to be a number of people having some difficulty with the concept of mailinglists. In the past 2 weeks, we have seen about 6 messages of people wanting to be subscribed to a mailinglist, sent to either <local-ir(a)ripe.net> or <ripe-list(a)ripe.net>. These addresses are the addresses of the lists themselves. Messages to these addresses go to everyone on this list. Messages like 'subscribe me' should therefore NOT go to these addresses. If you want to (un)subscribe you can use one of the following addresses: <majordomo(a)ripe.net> (except for closed lists like 'local-ir' and 'ncc-co') <ncc(a)ripe.net> <owner-[LISTNAME](a)ripe.net> <postmaster(a)ripe.net> but sending those messages to (all recipients of) the list makes no sense. Thank you.

1 0