Standard Policy
for the Use of Internet Number Resources
CIDR/EU-01
Published on July 28th, 2019
This policy becomes part of each Service Agreement for the Use of Internet Number Resources between the Lessor (LIR) and the Lessee and describes how Internet Number Resources may or may not be used.
Wilful or repeated violations of this policy can lead to a contract termination without notice.
1.0 Terminology
- The LIR (Local Internet Registry) is a member of one or more of the five Regional Internet Registries (RIR).
- Internet Number Resources (for short Resources) describes address space from the Internet Protocol (IPv4 and IPv6) and Autonomous System Numbers (ASN) which were allocated from a RIR to the LIR.
- The customer is the customer of the LIR.
- End customers are customers of the customer of the LIR, whether they are residential or business customers.
2.0 Use of Resources
The customer needs to make sure to the best of his knowledge that resources are not used in a way – also by end customers – which is not compliant with this policy.
2.1 Forbidden UseResources must not be used
- for proxy or VPN servers.
- for email marketing purposes.
- for unlawful purposes or activities which are usually considered as illegitimate (e.g. spamming).
2.2 RIR Service RegionResources may only be used in their according RIR Service Region, unless otherwise agreed.
2.3 LimitationIn order to prevent abuse, IPv4 resources which are sub-leased or given to end customers, are limited to not more than 16 single IPv4 addresses per IPv4 /24 subnet per end customer (this corresponds to an IPv4 /28 subnet or the equivalent thereof). For instance, when the customer of the LIR leases two IPv4 /24 subnets, then up to 32 (2 x 16) IPv4 addresses may be provided for each single end customer. To exceed this limit, the customer needs to justify for what reason the end customer would need more IP addresses.
3.0 Abuse Reports
3.1 Reaction TimeThe customer must react to abuse reports in a timley manner (typically within 24 hours) and, if applicable, needs to take necessary actions to stop any unintended use of resources.
3.2 Response TimeThe customer must respond to abuse reports within 72 hours. However, there is no obligation to answer reports which were made automatically.
4.0 Information Obligations
The customer is obligated to inform the LIR about important changes, such as
- a change of an announcement if this affects the ASN or the country where the announcement is made from.
- the change of the email address which is used for the redirection of abuse reports.
- necessary changes which have to be reflected in the RIR database.