I help a small non-profit university hostel with providing internet access to their users (around 60 people). Under the three strikes law, there's no way we're considered an IPAP (because of the requirement of internet access not being incidental). We meet all the other requirements.
How should we be dealing with this?
If we get to the stage of three notices, we'll be liable. It's very difficult to block P2P traffic, and even if we could, P2P does have it's legitimate uses.
Other than removing internet access completely, what protection do we have?