nanog mailing list archives
Re: Best practices for abuse@ mailbox and network abuse complaint handling?
From: "K K" <kkadow () gmail com>
Date: Fri, 11 May 2007 17:10:55 -0500
The issue I see with most of the options (abuse.net, spamcop, etc) is they're focused on the spam problem, while my department is made up of network operations, information security, and CERT, anything to do with web servers, domains, and SMTP is handled by a different business unit in another state entirely. While 99.99% of our abuse@ mail is either spam or complaints about spoofed spam forging our domains as the source and has nothing to do with network operations, about once a month something truly network related will come into that mailbox, and my team won't be alerted to these events in a timely manner. Only fix I can see right now is for us to make it part of our daily workload to troll the abuse@ mailbox on the off chance that something in there is relevant to network operations/security/CERT. Is this what other NANOs do? The clueful victims will look up our ASN/ARIN records and eventually make the right phone call -- or report the problem to law enforcement, who definitely know how to reach us ;) I'm hoping to find either a better and widely accepted way to handle non-spam-related network abuse complaints (hacking, DoS, etc), or at least best practices for triage on the huge volume of mail that comes into abuse@, procedures such that the rare legitimate complaint about non-spam network abuse can be routed to my team in a timely manner. Thanks, Kevin
Current thread:
- Best practices for abuse@ mailbox and network abuse complaint handling? K K (May 11)
- Re: Best practices for abuse@ mailbox and network abuse complaint handling? Albert Meyer (May 11)
- Re: Best practices for abuse@ mailbox and network abuse complaint handling? K K (May 11)
- Re: Best practices for abuse@ mailbox and network abuse complaint handling? Jeroen Massar (May 11)
- Re: Best practices for abuse@ mailbox and network abuse complaint handling? John Levine (May 11)
- Re: Best practices for abuse@ mailbox and network abuse complaint handling? william(at)elan.net (May 11)
- Re: Best practices for abuse@ mailbox and network abuse complaint handling? K K (May 12)
- Re: Best practices for abuse@ mailbox and network abuse complaint handling? Douglas Otis (May 13)
- Re: Best practices for abuse@ mailbox and network abuse complaint handling? John Levine (May 13)
- Re: Best practices for abuse@ mailbox and network abuse complaint handling? K K (May 11)
- Re: Best practices for abuse@ mailbox and network abuse complaint handling? Albert Meyer (May 11)
- RE: Best practices for abuse@ mailbox and network abuse complaint handling? Stasiniewicz, Adam (May 12)
- Re: Best practices for abuse@ mailbox and network abuse complaint handling? Al Iverson (May 12)
- Re: Best practices for abuse@ mailbox and network abuse complaint handling? Gerry Boudreaux (May 12)