Office365 rules and exceptions

[Craig_W]

Morning

 

We have rules created in Office365 that block external senders for student accounts other than domains that we list within the exceptions. We have never had a problem with this before, adding domains to exceptions when needed. However we use Arbor and the messaging system within, and despite adding the domain into the exceptions, all e-mails to students are still being blocked. I have carried out message traces within Office365 and this informs me of the name of the rule blocking the email, which is the rule I would expect to be blocking, but should be allowed through due to the exceptions. I have taken the domain directly from the message trace and added this into the exceptions, still without joy.

 

Does anybody have any ideas?

 

Thanks

[Michael]

Not sure, unless there are multiple/conflicting rules? An easy workaround is to use a generic school account and send out emails using this account to pupils.

[Craig_W]

Thanks Michael. I have noticed that Arbor sends from a no-reply e-mail address from an Arbor domain, but sends on behalf of a member of staff (who is logged into Arbor); I'm wondering if this has something to do with it

[chaplic]

Are you blocking/allowing on P1 or P2 headers (e.g. the from address users see or the envelope-from address used in the connection)

[andy_b]

Might not be directly related, but have you done this too?

 

https://support.arbor-education.com/hc/en-us/articles/360030423893-Stop-emails-ending-up-in-your-junk-inbox-Setting-up-DMARC-or-adding-an-SPF-Record#step-4-let-us-know-you-re-ready-to-go-0-3

[Michael]

You're right it does, but in theory adding the Arbor domain to the exceptions should do the trick and/or just add the no-reply address in full, rather than the domain?

 

Another idea is to add the Arbor domain as safe within the Anti-spam Policies

[Craig_W]

Think I have sorted! The P1 and P2 suggestion got me looking into this and there was another domain "sendgrid.net" which appears to have resolved the issue.

 

Thanks all

[chaplic]

only caution is sendgrid.net is a cloud service that lots of companies will use to send email, so if you are allowing them you might be opening up more than you think.

[Craig_W]

Thanks Chaplic, will keep an eye on whats incoming for the students accounts