SPF exception in EOP

Robert Szymanski 21 Reputation points
2023-02-09T11:46:47.8233333+00:00

Can I configure something like SPF exception for particular incoming SMTP domains? I mean- if I receive emails from partner's domains with not properly configured or without SPF records I don't want to have this emails in junk or quarantine. I think allow list is not good solution because I also don't know to bypass this emails without any kind of scanning. Can I achieve this functionality in EOP? I have this option in Forti Mail for example...  

Microsoft Exchange Online
Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
4,351 questions
0 comments No comments
{count} votes

Accepted answer
  1. Andy David - MVP 144.4K Reputation points MVP
    2023-02-09T12:26:13.9066667+00:00

    in EOP, you should use the Tenant Allow/Block List and only use that if you can:

    At some point, you HAVE to use a allow mechanism if you want to ensure these messages get through.

    You can create the allow via submission:

    https://video2.skills-academy.com/en-us/microsoft-365/security/office-365-security/tenant-allow-block-list-email-spoof-configure?view=o365-worldwide

    They will still be scanned for malware and the Tenant Allow list will teach Exchange Online rather than a transport rule that just allows the messages.

    https://video2.skills-academy.com/en-us/microsoft-365/security/office-365-security/create-safe-sender-lists-in-office-365?view=o365-worldwide#use-allow-entries-in-the-tenant-allowblock-list

    Otherwise, a transport rule

    User's image

    0 comments No comments

0 additional answers

Sort by: Most helpful