In article <[email protected]> you write: >4. Forwarding Abuse Reports From Local Users > >Shouldn't the forwarding be to the abuse team of the source IP address >in addition to the abuse team of an authenticated sending domain? ...
Since we're writing a standard for interoperability, not a BCP for abuse desks, I don't think we should tell people what to do with their reports beyond general advice to pass them along to responsible parties insofar as they can. Having run abuse.net for over a decade, I can assure you that identifying the best place to send reports, whether keyed on domains on or IP addresses, is a black art and not something you can put in a standard. There are plenty of heuristics and guesses, but no algorithm. R's, John _______________________________________________ marf mailing list [email protected] https://www.ietf.org/mailman/listinfo/marf
