Forum Discussion
Phishing Filter - M365 ATP - false positives blocked or clear spam messages get into inbox.
Hi everyone, we are having problems with our filter. We used Sophos UTM before but switched our MX now to M365 as there are 99% of the mailboxes. But we don't really get the logic behind the fil...
I have to push it back up.
Literally any newsletter is landing now in quarantine due to Phish. This is an authentication result of one of them:
| spf=pass (sender IP is 185.71.127.155) smtp.mailfrom=u106878.rmh1.net; mycompany.com; dkim=pass (signature was verified) header.d=rmh6.net;mycompany.com; dmarc=fail action=none header.from=amcham.de;compauth=fail reason=001 |
SPF right, DKIM pass.
Why not send this mail into "Junk" but into "Quarantine" where to user has to release it?
Spam Level is "5" for this.
This takes up a lot of time ... my colleague also went through some support calls but this is just a waste of time.
"It is what it is"