ISPs blocking port 53? (was Re: Annoying dynamic DNS updates)

Mon Sep 29 21:42:19 UTC 2003

> > ... probably most of the Abuse issues (especially via email) would
> > continue to be ignored. Noone wants to handle that stuff. But
> > someone(s) must handle that stuff.
>
> the underlying question is, "or else what?"

* Fortunately, at least where I was, there is a knowledge of AUPs having
written their own and being aware of the AUP of their backbone peer. I set
up abuse@ and such email aliases. Funny thing was 3 or 4 of us got the
emails, and two or 3 of them forwarded them to me. I handled them for 1.5
years before they let me use another person to help. With a 10,000 user
subscriber base there is a LOT of abuse emails and it is only getting worse.
Everybody and their brother is having a personal firewall and reporting
every door-knock they get even if they are blocking it. Things had to be
prioritized based upon who they were coming from and what was the complaint.
Obviously if I knew you were another ISP or NSP you got high priority. I did
a lot of work to track down abuse complaints there.

So the question is are AUPs enough to get THEM to answer report or
complaints? ISPs should be enforcing their AUPs, but are they? and if so how
quickly? Usually have to give an end-user some time to comply to a complaint
... especially if you don't reach them. You'd be amazed at how many accounts
I suspended for AUP. But I don't expect there to be that level of action at
every ISP, or even at where I was ... now that I am gone from there.

Maybe there should be some kind of certification for ISPs? But why should
they get certified if there is no incentive? If they have Systems and
Network Admins which are certified they figure that covers it. But not every
one of those certified persons has an ISP clue++ since it isn't part of any
popular certification that I am aware of.

Or some blanket organization that everyone should join and know and or learn
the ropes ... something that is required before you can register a domain
name or fire up DNS servers, or at least before you turn up your first
dedicated connection.

Some sellers of ISP provisioning software help a little bit. IMHO a VERY
LITTLE BIT when you switch to their software. But after that almost
everything becomes your responsibility. After all they aren't ISP/NSP
training organizations.

A lot of things are volunteer. Such as being on a NetOps Contact List, and
being on http://www.abuse.net/. A lot of things are recommended ... but
someone in an organization has to care and go find those things.