What safeguards does Oracle B2C Service have in place to protect the email system from abuse?
Oracle B2C Service, All versions
Oracle B2C Service is making cloud computing safer. Computer viruses present a constant threat and Oracle B2C Service takes proactive measures to protect its customers from infected files.
Oracle B2C Service Hosted Mailboxes: Customers have automatic virus filtering implemented for any mailbox hosted on Oracle B2C Service servers. The policy that Oracle B2C Service has put into place is:
- Any email that comes into our system that is detected as a virus will be rejected with a "550 Permanent Failure" message. In this scenario the mail server that attempted to send email to our systems will be responsible for notifying the originator of the email.
- When we send the "550 Permanent Failure" message back to the previous mail server, we also send a notification email to your mailbox. This email contains who the message came from, what virus was detected, and the headers from the message. These messages will come from the "email@example.com" email address. If you do not wish to create incidents you may add "firstname.lastname@example.org" to your discard addresses.
Use of Nonhosted Mailboxes: For customers using externally hosted mailboxes within Oracle B2C Service, we recommend that these mailboxes have virus filtering implemented. Many times a virus infected email will block other mail from coming in and require that the virus infected email be removed before your other mail can be processed.
For a concise list, alphabetized by literal extension, refer to: http://www.isi.edu/in-notes/iana/assignments/media-types.
For more information on virus updates and Internet security issues, please visit the CERT® Coordination Center Web site at http://www.cert.org/.
Ask a Question Submittals and File Attachments: Customers have automatic virus filtering implemented for any file attachments sent to Oracle B2C Service's cloud from Customer Portal, API or Chat. Oracle B2C Service tries hard to make positive and accurate attempts to eliminate infected files, but we can't guarantee we will catch everything. For this reason, we suggest everyone also maintain their own antivirus protection and practice safe computing.
Cannot open attachment: If you have clicked on the attachment and the program fails to open the file, the file may have contained a virus. Try opening the file with a text editor. If there is a virus related note, keep reading.
How an infected file attachment be treated: If the incoming attachment is identified as infected, the infected file will be deleted. Another file (with the identical original file name and extension) will be inserted containing a text phrase notifying you that the file was removed due to a detected virus. Simply open the file with a text editor to view the text. If you suspect the attachment file was misidentified as a virus, contact Oracle B2C Service Technical Support for assistance.
Spam and Malware Email Filtering
Spam filtering is available for Service mailboxes hosted with Oracle B2C Service. Oracle RightNow Outreach Cloud Service mailboxes are not eligible for spam filtering.
For more information on the spam filtering, refer to Answer ID 11713: Managing the new Spam Quarantine
Additional Email Filtering
Oracle B2C Service's techmail utility parses email and checks for a bulk precedence setting in the header of a message and will, by default, discard any messages matching this flag. Bulk precedence is a flag set on nearly all bulk mailing servers. As an Oracle B2C Service customer, the Delete Bulk Message setting in your mailbox is enabled by default and is what controls this process. However, in rare instances, there may be originators of spam that have disabled this flag on their mail servers, therefore, such messages may come through.
In addition to the Delete Bulk Message feature, there are two discard options to assist in blocking file attachment types. Two distinct fields, Discard MIME Types and Discard File Types within the Service Mailbox configurations, allow you to specify types of files that will not be attached to an incident created from mail sent to the mailbox.
- Discard (Mime) Types: Enter a list of attachment type(s) you will not accept in MIME format (type/subtype). The major MIME types are application, audio, image, message, model, multipart, text, and video. Separate entries in the list with commas. An asterisk (*) can be used to match any characters. For example, to exclude MPEG video attachments, GIF images, and all audio formats, use: video/mpeg, image/gif, audio/*
- Discard File Types: Enter a list of attachment type(s) you will not accept, based on the file name extension. Separate entries in the list with commas. Specific filenames can be specified, or an asterisk (*) can be used to match any characters. For example, to exclude all executable files, screen savers, and a script titled worm.vbs, use: *.exe, *.scr, worm.vbs, *.pif, *.doc, *.pi
For more information on configuring mailboxes in Oracle B2C Service, refer to Answer ID 331: Setting up a Mailbox in Oracle B2C Service.