| Ref # |
Principle or Proposed Principle
|
| W2F001 |
Web/Email-to-Fax Services should maintain
an adequately and competently staffed abuse desk on a 24 hour, 365 day
per year basis. The contact details for the abuse desk should be
readily and easily accessible on the website of the Web/Email-to-Fax
Service Provider, be included on all faxes sent, and also listed with
the Network Abuse Clearinghouse at http://abuse.net |
| W2F002 |
Upon receipt of an evidence-based abuse
report, the abuse desk of the Web/Email-to-Fax Service should
investigate the complaint and take action within two (2) hours. If the
complaint is valid, the email address and the originating IP Number of
the offender should be barred immediately. If the complaint cannot be
properly investigated within two (2) hours, the email address and
originating IP Number of the alleged offender should be temporarily
barred while the investigation continues. All complainants should be
sent a reply stating the outcome of the investigation and the action
taken. |
| W2F003 |
The cover sheet of all faxes sent via
web/email-to-fax services should, in addition to the requirements of
W2F001, include the confirmed email address, the originating IP Number,
the rDNS and timestamp details of the sender. |
| W2F004 |
Web/Email-to-Fax Service Providers should
ensure that the email address quoted by the sender of faxes via their
service is valid, and that it does belong to the sender, prior to
despatch of the email. This confirmation should be done in a manner
similar to that used by confirmed-opt-in (sometimes referred to as
'double-opt-in') email subscription services, by sending an email to
the email address quoted by the sender asking for a reply to confirm
the faxing instructions, prior to the fax being sent. |
| W2F005 |
Web/Email-to-Fax Service Providers should
not allow themselves to be used as defacto anonymous services, and
should protect themselves from being so used by only permitting access
where the user's originating IP is unmistakeable. Technologies to
recognise when users are using non-transparent proxies, and to block
access accordingly, should be implemented. |
| W2F006 |
Web/Email-to-Fax Service Providers should
enable technology to prevent automated account registrations, ensuring
that accounts opened can only possibly be humanly applied for or
operated. |
| W2F007 |
Web/Email-to-Fax Service Providers should,
where there may be any question as to the identity of the sender (such
as with non-paying free advertising supported services, for example),
place strict limits on the number of messages that may be transmitted
in a given time frame. (For the sake of recommendation and example,
say, 10 per 24 hour period.) |
| W2F008 |
|
| W2F009 |
|
| W2F010 |
|
| W2F011 |
|
| W2F012 |
|
