Hi Brandon
“ the entire ASN cannot be "blocked" just because there is a complaint on one IP address”
Why not? They are being advertised by the same ASN so at least nominally they are under common administrative control. Therefore if that administrative control is not taking responsibility for complaints they may be treated as a bad actor on the internet.
Also people chose to block / rate limit / etc things on their networks for whatever reason makes sense to them.
I think if you have a customer or partner who doesn’t look after scams or worse coming from their network you may need to consider disconnecting them if you are not willing to be marked as the same bad actor for at least passively enabling them.
This could still happen if they had their own ASN with their own netblocks because if you are still providing transit to them and take no action you may again be flagged as a bad actor.
We all have a role to play keeping our networks clean and positive members of the internet community.
Might be time to have your customer / partner clean up their actions in response to complaints or ensure that you don’t need a good reputation with spamhaus to operate.
Regards
Alexander
Well, those prefixes are not for their VPS hosting service (which cause a lot of complaint). Just like there are many IP addresses under the telecommunication company, the entire ASN cannot be "blocked" just because there is a complaint on one IP address
If someone tries to break into my house over and over, I won't act any different if they show up wearing different clothes.
From: "Brandon Zhi" <
Brandon@huize.asia>
To: "Christopher Morrow" <
morrowc.lists@gmail.com>
Cc: nanog@nanog.orgSent: Monday, March 20, 2023 9:43:19 AM
Subject: Re: Spamhaus flags any IP announced by our ASN as a criminal network
Yes, for those prefixes are used to hosting service have been listed for a long time. However, for those new prefixes that we rented...... We just announced it.. even though it's unreachable... They just listed to this list.
On Mon, Mar 20, 2023 at 9:51 AM Brandon Zhi <Brandon@huize.asia> wrote:
> I don't think any ISP would reject an IP that is on the Spamhaus list.
you, clearly, have been living under several rocks for a very long time.
--