RE: Removal of IP

["Fisayo Adeleke" <fisayo at steineng.com>]

We used to disconnect offending customers immediately but we reviewed
the policy as said earlier only for spams and all that. If it were to be
infections, yes it's immediate. We had to review the policy because of
some issues which have been raised earlier on this topic. The spam comes
from a customer (you get to see the single public IP) and it always
becomes a hell of problem when the customer tells you its not him but
probably a transit surfer. So the grace period is to kind of get to know
better. And ofcourse when u;re a repeat offender, you get the boot also
;-)

		-Fisayo

::-----Original Message-----
::From: Brian Longwe [mailto:brian at pch.net] 
::Sent: Tuesday, May 06, 2003 2:07 PM
::To: Fisayo Adeleke
::Cc: ALAIN PATRICK AINA; sfolayan at skannet.com.ng; Brian 
::Candler; afnog at afnog.org
::Subject: RE: Removal of IP
::
::
::
::We immediately disconnect the offending  (or is it offensive) 
::customer, and do not reconnect untli one of our engineers has 
::been to their premises (at their expense) and confirmed that 
::any spam-ware, open SMTP proxy, NIIMDA infections and other 
::unpleasant stuff has been sorted.
::
::Repeat offenders get the boot ;-)
::
::Longwe
::
::On Tue, 6 May 2003, Fisayo Adeleke wrote:
::
::> ::-----Original Message-----
::> ::From: ALAIN PATRICK AINA [mailto:aalain at trstech.net]
::> ::Sent: Tuesday, May 06, 2003 12:17 PM
::> ::To: sfolayan at skannet.com.ng; Brian Candler
::> ::Cc: afnog at afnog.org
::> ::Subject: Re: Removal of IP
::> ::
::> ::
::> ::
::> ::
::> ::> As Fisayo and others have written in previous posts, it 
::is ::not 
::> as easy ::> as it seems.
::> ::
::> ::But  you  have to face the case. It is the same situation
::> ::when corrupted or
::> ::hacked machines from your IP block scan ports on other
::> ::networks. If you don't react, your whole block get locked.
::> ::
::> ::
::> ::--alain
::> ::
::>
::> We do react to such emails. Like in our own case as a matter of 
::> policy, when we receive complaints or reports about spam from any 
::> customer, we will execute *among other actions* have the IP address 
::> moved to a special watch-list for the following 8 days. If 
::a complaint 
::> regarding an IP address on the watch-list is received after a grace 
::> period of 24 hours but before the expiration of the 8 days, the IP 
::> address is blocked for all access to the Internet for 3 days. The 
::> customer receives an e-mail informing about this. After the 
::3 days the 
::> IP address is un-blocked and a notification is sent to the 
::customer. 
::> If it re-occurs a 3rd time then we cut off the account - it 
::may come 
::> to Sunday's *business
::> unusual* at times ;-)
::>
::> 		-Fisayo
::>
::>
::>
::>
::>
::> ::-----
::> ::This is the afnog mailing list, managed by Majordomo 1.94.5
::> ::
::> ::To send a message to this list, e-mail afnog at afnog.org
::> ::To send a request to majordomo, e-mail 
::majordomo at afnog.org ::and put 
::> your request in the body of the message (i.e use ::"help" for help)
::> ::
::> ::This list is maintained by owner-afnog at afnog.org
::> ::
::> ::
::>
::> -----
::> This is the afnog mailing list, managed by Majordomo 1.94.5
::>
::> To send a message to this list, e-mail afnog at afnog.org
::> To send a request to majordomo, e-mail majordomo at afnog.org and put 
::> your request in the body of the message (i.e use "help" for help)
::>
::> This list is maintained by owner-afnog at afnog.org
::>
::
::

-----
This is the afnog mailing list, managed by Majordomo 1.94.5

To send a message to this list, e-mail afnog at afnog.org
To send a request to majordomo, e-mail majordomo at afnog.org and put
your request in the body of the message (i.e use "help" for help)

This list is maintained by owner-afnog at afnog.org