Spamhaus flags any IP announced by our ASN as a criminal network

Mon Mar 20 15:09:07 UTC 2023

Hi Brandon

“ the entire ASN cannot be "blocked" just because there is a complaint on
one IP address”

Why not? They are being advertised by the same ASN so at least nominally
they are under common administrative control. Therefore if that
administrative control is not taking responsibility for complaints they may
be treated as a bad actor on the internet.

Also people chose to block / rate limit / etc things on their networks for
whatever reason makes sense to them.

I think if you have a customer or partner who doesn’t look after scams or
worse coming from their network you may need to consider disconnecting them
if you are not willing to be marked as the same bad actor for at least
passively enabling them.

This could still happen if they had their own ASN with their own netblocks
because if you are still providing transit to them and take no action you
may again be flagged as a bad actor.

We all have a role to play keeping our networks clean and positive members
of the internet community.

Might be time to have your customer / partner clean up their actions in
response to complaints or ensure that you don’t need a good reputation with
spamhaus to operate.

Regards
Alexander

On Tue, 21 Mar 2023 at 04:00, Brandon Zhi <Brandon at huize.asia> wrote:

> Well, those prefixes are not for their VPS hosting service (which cause a
> lot of complaint). Just like there are many IP addresses under the
> telecommunication company, the entire ASN cannot be "blocked" just because
> there is a complaint on one IP address
>
> On 2023年3月20日周一 下午10:50 Mike Hammett <nanog at ics-il.net> wrote:
>
>> If someone tries to break into my house over and over, I won't act any
>> different if they show up wearing different clothes.
>>
>>
>>
>> -----
>> Mike Hammett
>> Intelligent Computing Solutions <http://www.ics-il.com/>
>> <https://www.facebook.com/ICSIL>
>> <https://plus.google.com/+IntelligentComputingSolutionsDeKalb>
>> <https://www.linkedin.com/company/intelligent-computing-solutions>
>> <https://twitter.com/ICSIL>
>> Midwest Internet Exchange <http://www.midwest-ix.com/>
>> <https://www.facebook.com/mdwestix>
>> <https://www.linkedin.com/company/midwest-internet-exchange>
>> <https://twitter.com/mdwestix>
>> The Brothers WISP <http://www.thebrotherswisp.com/>
>> <https://www.facebook.com/thebrotherswisp>
>> <https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg>
>> ------------------------------
>> *From: *"Brandon Zhi" <Brandon at huize.asia>
>> *To: *"Christopher Morrow" <morrowc.lists at gmail.com>
>> *Cc: *nanog at nanog.org
>> *Sent: *Monday, March 20, 2023 9:43:19 AM
>> *Subject: *Re: Spamhaus flags any IP announced by our ASN as a criminal
>> network
>>
>> Yes, for those prefixes are used to hosting service have been listed for
>> a long time. However, for those new prefixes that we rented...... We just
>> announced it.. even though it's unreachable... They just listed to this
>> list.
>>
>> On 2023年3月20日周一 下午10:34 Christopher Morrow <morrowc.lists at gmail.com>
>> wrote:
>>
>>> On Mon, Mar 20, 2023 at 9:51 AM Brandon Zhi <Brandon at huize.asia> wrote:
>>>
>>> > I don't think any ISP would reject an IP that is on the Spamhaus list.
>>>
>>> you, clearly, have been living under several rocks for a very long time.
>>>
>>
>> --
Regards
Alexander

Alexander Neilson
Neilson Productions Limited

alexander at neilson.net.nz
021 329 681
022 456 2326
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20230321/63f355d3/attachment.html>