I'm checking in to see what people think of IP reputation services. I run an ISP (well, a couple of them) and we occasionally run into issues where customer IPs stop working with various services because of reputation issues. We run a fairly light-touch as to our customer's traffic, but when it creates support issues, one starts to look for better ways of skinning the cat. I've found a few of them out there, but they seem to be priced as if I'm a hosting company or an ESP, not an end-user-focused ISP. TIA ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com
Mike,
I've found a few of them out there, but they seem to be priced as if I'm a hosting company or an ESP, not an end-user-focused ISP.
There are only two IP-based reputation services that are truly widely used, world-wide, ours and Validity's (nee ReturnPath). Our have *always* been free for receivers to query, and always will be, as our primary reason for having been in business for going on 20 years is to provide a way for *receivers* to determine the ham from the spam (making it easier for them to reject spam). I'm surprised to hear that *any* of the others are charging for access for querying - shocked in fact. You can always query our IADB (ISIPP Accreditation Database, now known to consumers as the Good Senders List, or GSL) here: iadb.isipp.com More general information about the IADB is here: https://www.isipp.com/for-isps/ You can read more about our granular query responses, which we call Data Response Codes (we were the first to develop this method of responding to IP-based queries, nearly 20 years ago): https://www.isipp.com/for-isps/about-the-codes/ If you have any questions, any at all, please feel free to reach out to me directly. Kind regards, Anne --- Anne P. Mitchell, Esq. CEO Get to the Inbox by SuretyMail Author: Section 6 of the CAN-SPAM Act of 2003 (the Federal email marketing law) Author: The Email Deliverability Handbook Board of Directors, Denver Internet Exchange Dean Emeritus, Cyberlaw & Cybersecurity, Lincoln Law School Prof. Emeritus, Lincoln Law School Chair Emeritus, Asilomar Microcomputer Workshop Counsel Emeritus, MAPS: Mail Abuse Prevention System (now the anti-spam division of TrendMicro)
On Monday, April 4th, 2022 at 15:37, Mike Hammett <nanog@ics-il.net> wrote:
I'm checking in to see what people think of IP reputation services.
Pre-IPv6 I was always a little apprehensive of using them for general use because it was always a bit murky how they collected the IPs in the first place. This of course excludes email anti-spam reputation services which are inherently a different kettle of fish. For non-email use I tend to favour CAPTCHA (or, hCAPTCHA to be precise, as I don't believe in giving Google any more data). Post-IPv6 I would think IP reputation services are fairly pointless. With people being given anything up to a /48 without question what are you going to do ? Block whole /48s ?
On Mon, Apr 4, 2022 at 9:12 AM Laura Smith via NANOG <nanog@nanog.org> wrote:
On Monday, April 4th, 2022 at 15:37, Mike Hammett <nanog@ics-il.net> wrote:
I'm checking in to see what people think of IP reputation services.
Pre-IPv6 I was always a little apprehensive of using them for general use because it was always a bit murky how they collected the IPs in the first place.
Post-IPv6 I would think IP reputation services are fairly pointless. With people being given anything up to a /48 without question what are you going to do ? Block whole /48s ?
Yes. Or /29s. Or ASNs. Depends on the scope of the abuse, and if the provider is complicit. One thing to keep in mind is data freshness. For individual IPs (or /48s) ownership can change frequently, so you need to make sure blocks expire in a timely manner. For /29s or ASNs this is less of a problem.... But... back back to the original question: consider trying to give each customer a stable IP. Rotating IPs frequently allows a single bad (or compromised) customer to poison your entire IP-space. Keeping them fixed allows you to identify the problem and get them cleaned up. Damian
participants (4)
-
Anne Mitchell -
Damian Menscher -
Laura Smith -
Mike Hammett