[anti-abuse-wg] Abuse Services et al

Abuse Tolerant Services like these: http://autopmta.com/

Has forced me to change the blacklist policy on dnsbl 

   superblock.ascams.com 

(which now has anything between 2, 3 and 4+ million entries and growing
nicely :) )

Before, permanent block was not possible, but now I have added a
permanent block category, and if listed in this category de listing is
not possible - so some of the ipv4 resource(s) has effectively become
unusable, permanently.

Some resource ranges change company, even change Country - but still 
the abuse/spam/phish/scams are ongoing... - So, simple: never de list
and the problem goes away, permanently.

As ipv6 works on a white list (dnswl) it does not present the same
challenges as ipv4

Problems that I am still trying to resolve/solve:
Facebook.com, Twitter, LinkedIN and some other "services" do not respond
or bother with abuse complaints much, so they tend to end up being
blocked, blocks lifted and just blocked again and again, over and over...

These services rely heavily on email marketing "user notices" to market
themselves and to keep them "relevant" - even by creating many fake
profiles and accounts and then sending these fake email accounts
copious amounts of "event notifications"  or in the case of LinkedIN
constantly "inviting" spamtraps to join :)

the public ESP's (Google,Hotmail,Yahoo, etc) - Google and Hotmail
respond well to abuse and actually cleans up, but they still end up on
block lists, even after adjusting for volume, fortunately usually only
for a day or two - but this still causes some problems - My personal
opinion are that these services are too eager to allow anyone to create
email accounts and that this largely contributes to abuse.

The constant technological advances made in technology used by
criminals and crime syndicates is also resulting in normal companies
(not isp/esp) requiring in house abuse administrators - to manage both
ingress and egress.

As Commercial banks already know (and have security teams for) 
normal companies are figuring out that crime is becoming more targeted
and sophisticated. The types of attacks cannot be handled at esp/isp
level or addressed by general user training (as it is done for
social engineering etc etc)     

Probably society in general needs more abuse education, to protect
themselves, I guess - more/better media coverage?

Andre