DNS-Abuse-Measurements

Download

dns-abuse-measurements@icann.org

February 2020

1 participants
2 discussions

Re: [DNS-Abuse-Measurements] [Ext] Re: Detailed steps for ccTLD participation in the DAAR project
by Samaneh Tajalizadehkhoob Feb. 6, 2020

Feb. 6, 2020

Hi Michele, For ccTLDs there would be no cost at all. Just a one time process to provide their zone files to ICANN and use DAAR data that is pushed to them to monitor their own abuse. Cheers, Samaneh On Feb 5, 2020, at 11:32 AM, Michele Neylon - Blacknight <michele(a)blacknight.com<mailto:michele@blacknight.com>> wrote: Samaneh Dumb question, but is there a cost for the ccTLDs to do this? I assume there is a cost to ICANN. Regards Michele -- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains https://www.blacknight.com/ [blacknight.com]<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.blacknight.com_&d=…> http://blacknight.blog/ [blacknight.blog]<https://urldefense.proofpoint.com/v2/url?u=http-3A__blacknight.blog_&d=DwMG…> Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Personal blog: https://michele.blog/ [michele.blog]<https://urldefense.proofpoint.com/v2/url?u=https-3A__michele.blog_&d=DwMGaQ…> Some thoughts: https://ceo.hosting/ [ceo.hosting]<https://urldefense.proofpoint.com/v2/url?u=https-3A__ceo.hosting_&d=DwMGaQ&…> ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845 From: DNS-Abuse-Measurements <dns-abuse-measurements-bounces(a)icann.org<mailto:dns-abuse-measurements-bounces@icann.org>> on behalf of Samaneh Tajalizadehkhoob via DNS-Abuse-Measurements <dns-abuse-measurements(a)icann.org<mailto:dns-abuse-measurements@icann.org>> Reply to: Samaneh Tajalizadehkhoob <samaneh.tajali(a)icann.org<mailto:samaneh.tajali@icann.org>> Date: Monday 3 February 2020 at 03:11 To: "dns-abuse-measurements(a)icann.org<mailto:dns-abuse-measurements@icann.org>" <dns-abuse-measurements(a)icann.org<mailto:dns-abuse-measurements@icann.org>> Subject: [DNS-Abuse-Measurements] Detailed steps for ccTLD participation in the DAAR project Dear all, Up to now we have had several ccTLDs contacting our global support department for joining the DAAR project by providing their zone files. Up to now, 3 TLDs have completed the process of providing their zones to ICANN and we are working with our contractor to start integrating their zones into the DAAR system and push them their daily abuse stats. This is to be up and running in the very near future. While going through this process, we have noticed certain details of the process is not fully clear. So decided to post the steps here and open the discussion in case of further questions. For the ccTLDs who are interested: 1- ccTLD makes a request by sending an email to globalsupport(a)icann.org<mailto:globalsupport@icann.org>. 2- The global support team will initiate a procedure to confirm the request by sending a couple of emails to both technical and administrative contact of the ccTLD as it is registered in IANA. 3- Once the request is confirmed by all parties, ICANN starts the procedure of taking the zone files in. 4- Once the zone file is in, it will be shared with iThreat Cyber Group, the contractor that maintains the DAAR system. 5- The DAAR system maps the domains in each TLD zone file to a series of Reputation Black Lists (RBLs) and produces abuse rankings per security threat type. 6- The ccTLDs will be able to access their own DAAR data via ICANN’s Monitoring System API (MOSAPI) on a daily basis. For now the data will be only published via the API to the ccTLDs themselves. We are further working on how to further publish general statistics of participating ccTLDs along with the DAAR monthly reports. Please feel free to contact me personally or reply to this email thread in case any of question. Cheers, Samaneh Tajalizadehkhoob Lead Security, Stability & Resiliency Specialist ICANN Office of CTO

1 0

Detailed steps for ccTLD participation in the DAAR project
by Samaneh Tajalizadehkhoob Feb. 3, 2020

Feb. 3, 2020

Dear all, Up to now we have had several ccTLDs contacting our global support department for joining the DAAR project by providing their zone files. Up to now, 3 TLDs have completed the process of providing their zones to ICANN and we are working with our contractor to start integrating their zones into the DAAR system and push them their daily abuse stats. This is to be up and running in the very near future. While going through this process, we have noticed certain details of the process is not fully clear. So decided to post the steps here and open the discussion in case of further questions. For the ccTLDs who are interested: 1- ccTLD makes a request by sending an email to globalsupport(a)icann.org<mailto:globalsupport@icann.org>. 2- The global support team will initiate a procedure to confirm the request by sending a couple of emails to both technical and administrative contact of the ccTLD as it is registered in IANA. 3- Once the request is confirmed by all parties, ICANN starts the procedure of taking the zone files in. 4- Once the zone file is in, it will be shared with iThreat Cyber Group, the contractor that maintains the DAAR system. 5- The DAAR system maps the domains in each TLD zone file to a series of Reputation Black Lists (RBLs) and produces abuse rankings per security threat type. 6- The ccTLDs will be able to access their own DAAR data via ICANN’s Monitoring System API (MOSAPI) on a daily basis. For now the data will be only published via the API to the ccTLDs themselves. We are further working on how to further publish general statistics of participating ccTLDs along with the DAAR monthly reports. Please feel free to contact me personally or reply to this email thread in case any of question. Cheers, Samaneh Tajalizadehkhoob Lead Security, Stability & Resiliency Specialist ICANN Office of CTO

1 0

Results per page: