How do I handle more than one level of incident handling (SPAM complaints for example)?

There are two ways to implement multi-level incident handling. The first method involves using multiple "e-mail:" attributes and accompanying "remarks:" attributes inside an irt object. The second method is to link to multiple irt objects in your inetnum objects and indicate the purpose of each, again by using "remarks:" attributes.