Forum Discussion
Solved
Proper whitelisting of microsoft.com on dnswl.org
I keep having the issue that system-generated e-mails, e.g. on Trace Reports get classified as spam by the receiving e-mail provider. The sender address is email address removed for privacy reasons ...
Hi VolkerM, for system-generated Microsoft 365 mail I would avoid trying to whitelist only by visible From address, because the actual sending infrastructure and envelope sender can vary. The better check is to review the message headers and confirm SPF, DKIM, DMARC, and the sending IP/range used for that exact message. If dnswl.org is involved on the receiving side, the receiving provider usually has to adjust their filtering logic or trust Microsoft's authenticated mail flow. On your side, make sure the reports are coming through Exchange Online normally and that no forwarding or connector is changing authentication results.