If possible, ARIN, or another "authority" should retain more information about the profile of address space, including delegations. As you noted, announcing first and fixing later is like a hit and run, then returning a while later to scrape up the fellow off the road. We just repatriated a portable /24 from a rouge who was using it, supposedly telling his upstream that we had "given them permission"......NOT. I suppose the question is, could a governing body (outside of government), ever keep reasonable control over things without the complete obedience of providers? M.

From: Mark Prior <mrp@connect.com.au> To: Sean Donelan <sean@donelan.com> CC: nanog@merit.edu Subject: Re: Defeating DoS Attacks Through Accountability Date: Sun, 12 Nov 2000 16:53:27 +1030

But the current practice of announcing first, and only after you kill some innocent bystander's network, then fixing it; needs to stop.

Every IP address should be traceable to an original recorded delegation. If the "paperwork" isn't complete or is inaccurate, we should work on fixing it. Sticking our heads in the sand, and announcing the network until someone complains is not good.

How would you propose to handle the case where an organisation has their own IP space which isn't currently advertised and then you receive a request from a third party to route it to them?

Mark.

_________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com.