GovernorHub emails and Office 365 Quarantine

[Oaktech]

I have a school who have just moved over from Gmail to Office 365 for mail. This has been a fairly seamless transition to be honest, but I'm getting some flak about specifically GovernorHub emails continuing to go to quarantine despite all the normal steps being taken to stop this. The address is: [email protected]

 

The users who have reported it have all been advised to right click, 'block', 'never block sender'.

I've got a whitelist that sets certain domains (our trust, other schools in our partnership, LA and neightbouring LAs, NHS, GovernorHub etc) to SCL -1 bypass spam (which seems to work for all the other domains in it)

I've reported false positive to MS

I've reported false positive and then set it to allow this type of message '45 days from last use' and I can see the domain in the tenant allow/block page.

 

But I've still got all emails from the domain going to quarantine... I'm wondering if the MS backend doesn't like the .email domain for some reason?

 

Before I do battle with MS support, anyone else got a clue?

[chaplic]

is it hitting an address still associated with gmail and being forwarded? the governhub email SPF record is set to soft fail which probaby equates to quarantine, but if you can post the email headers suitably redacted we can see if it's a problem at the governrorhub end

[Oaktech]

is it hitting an address still associated with gmail and being forwarded?

 

Thanks for replying

 

We did a cut over migration between systems rather than leaving anything to forward for that exact reason.

 

I can't see any fails in the headers, the SPF, DKIM and DMARC are explicit PASS.

 

The only thing that I can see is that whilst all the checks pass and the SPF record designates the sender correctly (I've checked in MX Toolbox), the actual sending server is a mailgun.net server. The reason always given in quarantine is BULK, so that tracks, but I'm still mystified as to why it continues to do it when we've requested it to not do it!

[chaplic]

I'd guess governorhub is using the shared IPs from mail gun rather than their own and it's got a bad reputation, MS have always been a little opaque about how some of this this works, for example you cannot receive email on port 25 from an IP that is believed to be home broadband, no matter how much you allowlist. Sorry, sounds like you need to enjoy the please of MS support..