Re: BACKSCATTERER problem... We are an ISP         


Author: Robert Bonomi
Date: Jan 31, 2008 09:13

In article i3g2000hsf.googlegroups.com>,
Parthe gmail.com> wrote:
>On Jan 29, 6:56 pm, bon...@host122.r-bonomi.com (Robert Bonomi) wrote:
>> In article
><797c6e92-da32-469e-b618-cd0365a96...@v17g2000hsa.googlegroups.com>,
>>
>> Parthe gmail.com> wrote:
>>>Whilst I fully appreciate the issues that backscatterer.org and other
>>>RBLs have, what can ISPs like my company do? You won't delist us but
>>>we don't control our customers mail servers.
>>
>>>I do my best to monitor the traffic that is pushed through my mail
>>>servers, I can and do restrict the customers that spam the network but
>>>by the time I do this the backscatter/spam is already forwarded and my
>>>company's IP address is blacklisted, in this case for the next 28
>>>days.
>>
>>>How do you justify this?
>>
>> One justification is "your best is not good enough for {whomever}"
>>
>> You are entitled to your opinion as to what is acceptable/appropriate effort.
>>
>> THEY are _equaly_ entitled to their opinion.
>
>Since you speak in the third person I presume you are not a
>representative of backscatterers.org.
>
>> end of story.
>
>No, not "end of story", why must you deal in absolutes?

It _is_ the 'end of the story'. You have an opinion of how they 'should'
run their service. They have a different opinion.

You are not one of their 'users'/customers'.

Their users/customers *LIKE* the way they run their service. The proof of
that is that said customers *do*use* it.

Given that the customers are happy, they have no interest/reason to make
any changes in policy that would give an 'incompetent/uncaring/too-cheap-
to-do-things-right' (take you pick) ISP a free ride.
> I asked their
>opinion with the possibility (not guarantee) of coming to a mutually
>agreeable solution.

If you want backscatters.org's opinion. contact them directly. The way
to do that is *NOT* in a public forum such as this.

There is, however, *NO* basis for any hope (let alone expectation) that
they will modify their position one iota.
>It strikes me (from an ISP point of view, naturally) that maybe ISPs
>could be given 24 hours to throttle the offending customer ?

It strikes ME (from a _victim's_ point of view, naturally) that maybe
24 hours is at least 23.75 hours *TOO*LONG to be getting shat upon by
the customer of an ISP that doesn't know how (or doesn't care enough)
to require that the customer _not_ do that.

You can run your network 'however you d*mn well please'.
I have the same right, as regards _my_ network.

IF some other network causes my network problems, _I_ have a solution for that
problem. I don't accept *anything* from the ISP that lets their customer
'run amok' even if "only for a _little_ while".

This fixes _my_ problem. If my 'solution' causes *you* difficulties, too bad,
that's not *my* problem.

If you don't like the way _I_ deal with problems *your* customer causes me,
then avoiding it *really* is simple -- SEE TO IT that your customer _does_
_not_cause_me_ problems in the first place.

The cold, cruel, fact is that you ARE "known by the customers you keep".
If they screw up, you _are_ held responsible. This _is_ the way the
Internet works. Other people 'extend trust' to you -- allowing you to
use parts of _their_ networks (like incoming mail servers) at no cost to
you *ON*THE*ASSUMPTION* that you will not abuse that _privilege_. If you
take advantage of, or otherwise abuse, that trust, they reserve the right
to revoke it.

If you choose to let others use your network resources and connectivity,
you _are_ responsible to see to it that _they_ behave appropriately as
well. Failure to do so is an abuse of the trust that the rest of the
net has extended to you AS A NETWORK OPERATOR. If your customers abuse
other people's resources, *you* will be held responsible, as well the
actual abuser. It can be argued, in the case of the end-user that
'they didn't know any better'. You, the provider do *NOT* have that excuse;
you are *supposed* to 'know better' -- that's part of being a professional
in the business. *AND* a claim by the customer that they (the customer)
'didn't know any better' is an indictment of _your_ failings as a provider
to see that they _were_ so educated *BEFORE* letting them use your network.

People like 'backscatters.org' don't "owe you" a d*mn thing -- the only
people they need to keep happy are the people who _use_ their service.

Any systemic/systematic 'errors' in operation are _self-correcting_; if
the rules by which the list operates are not a 'good match' with the
policies of the sites using it, those sites _stop_ using it -- and the
effectiveness of the list decreases accordingly. Such a list has an
impact that is directly related to the number/size of places that feel
it's policies *ARE* an appropriate response to the problem being addressed.

If that causes _you_ (a non-user of the list) problems, "Tough sh*t" applies.
The list operator _doesn't_care_ whether you are happy or not. :)

If you think there's a 'better' way to do it, feel free to start such a
list and _prove_ it. If it really _is_ better, the user community will
start using your list *instead* of the inferior one. And thus your problem
is SOLVED.

"Put up, or shut up" applies.`

As for your "bright idea" of "notify the ISP first", *WHO*PAYS* them to
do that? Do you really think they should work for you (an ISP) for free?

Any ISP that _CARES_TO_, can monitor network traffic on their network, and
detect the things that 'backscatters.org' objects to -- and do it *LONG*BEFORE*
'backscatters.org' sees enough reports to take action.

You have a choice:
1) continue sloppy enforcement of policy, with the resultant listings,
because thats all the effort you're "willing to spend" on the problem.
2) take the steps necessary to fully eliminate the problem from your network.

One choice is 'cheap' and delivers impaired Internet connectivity.

The other costs more money, but lets you deliver 'what you promised' to your
customers.

The choice *IS* yours. "Choose wisely."

--
Comments posted to news.admin.net-abuse.blocklisting
are solely the responsibility of their author. Please
read the news.admin.net-abuse.blocklisting FAQ at
http://www.blocklisting.com/faq.html before posting.
diggit! del.icio.us! reddit!

RELATED THREADS
SubjectArticles qty Group
cvs commit: src/sys/dev/isp isp.c isp_freebsd.c ispmbox.hmailing.freebsd.cvs ·