Office365 isn't rejecting emails from external domains anymore. HELP.

[Garacesh]

We did have it set up where any external email would be rejected. Well thankfully we've just had a student come and tell us that it's allowing emails from their @gmail account!

 

1) I'd advise everyone else to check theirs because I am 100% certain it was turned on for us. It now is not.

2) Does anybody know where they've moved the option to? I can't find it in the Exchange Admin Center

 

This is obviously a massive child protection issue and needs resolving ASAP.

[snagrat]

Just create a mail flow rule to drop any emails from external domain

[Garacesh]

Yeah, I've literally just finished doing that as you posted. But I'm sure there used to be an actual option for it.

[ZeroHour]

I am pretty sure it used to be more obvious but if you edit the mailbox->message delivery restrictions the popup should have the option "Require that all senders are authenticated" which I think would block external emails.

 

Edited November 14, 2016 by ZeroHour

[tinca492]

I think it used to be called "Closed Campus"

 

I can recall some communication from MS when it changed saying that this was happening and that the creation of a couple of "mail flow" rules replicated the functionality. I have a 365 group called blocked external and all student email accounts are members of this group. I also test every so often to make sure that it is effective.

 

Mail Flow rules are very flexible and straightforward to set up. I have one student account that if he tries to send to anyone other than his tutor, blocks the message and sends me the email letting me know it has happened.

[mavhc]

is this of use? https://blogs.technet.microsoft.com/educloud/2012/03/02/supervision-policies-for-exchange-online-in-office-365-for-education/

[tinca492]

is this of use? https://blogs.technet.microsoft.com/educloud/2012/03/02/supervision-policies-for-exchange-online-in-office-365-for-education/

 

that's the little B*gger. cant believe it was 4 years ago.

[Garacesh]

is this of use? https://blogs.technet.microsoft.com/educloud/2012/03/02/supervision-policies-for-exchange-online-in-office-365-for-education/

 

Aye, that's what I ended up doing last night.

 

It's nice that they made 'default rules' for that, it meant the fix was simple and quick to implement, but I'm certain there used to be a global option for it, and I'm fairly peeved that they got rid of that. I have no way of knowing how long it's been possible to communicate with addresses outside the domain or if this has taken place besides the one student that came to tell me about it.