Forum Discussion
Tenant policy (verdict override) Exchange Online
Hey All, My company recently received a spoofed phishing email from noreply@[companyname].com and it passed through both our spam and phishing filters. Upon further inspection, it had an SPF fai...
Just run a message trace, it will let you know why. Most likely some sort of a whitelist.
ThanksVasilMichev !
It turns out we had our own domain whitelisted which led to the override of our other security policies.
That's not as uncommon as one might think - removing your own domain from any whitelists is practically the #1 recommendation from the EOP folks lately.