After our recent post Introducing more control over Direct Send in Exchange Online, there have been more questions about scenarios that are not actually Direct Send such as senders being able to igno...
Updated Aug 07, 2025
Version 7.0
Blog Post
I am seeing emails making it through now that have found a way to bypass the transport rules, curious if anyone else has recently?
Is your blocking rule set up the same as what's shown above, including the priority and to stop processing more rules? If so, the only way an email will not be quarantined is if it matches at least one exception condition. You can review the headers of a message you believe should have been quarantined to determine why it didn't trigger the rule. My expectation is you'll see it came from an authorized IP address, and/or it has the 'X-MS-Exchange-Organization-AuthAs' header with the word 'Internal'