Forum Discussion
Microsoft Defender for Email & Collaboration - "Whitelist"
- I do see SFV:BLK in the header.
Ben_Harris,
I could not have phrased it better (paragraph 1). The messages, appriver included, are from a third party solution that has an automated e-mail sent out to us, as well as having hundreds, if not thousands or of clients; which leads me believe we would not be the only client that has this issue; and may resolved it by now. The cause may be in my e-mail protection; so I whitelisted (oh, allowlisted ) the domain as well as the source e-mail adress; which still has not resolved the issue.
As per your suggestions for a third possible problem, I am unable to find SFV:BLK in the header. But, I see some hint of an issue. Would you mind helping?
Here are some portions of the header that may be of use:
X-MS-Exchange-Organization-InternalOrgSender: False
Authentication-Results: spf=softfail (sender IP is x.xxx.xxx.xx)
smtp.mailfrom=domain.com; dkim=pass (signature was verified)
header.d=domain.com;dmarc=pass action=none
header.from=domain.com;compauth=pass reason=100
Received-SPF: SoftFail (protection.outlook.com: domain of transitioning
domain.com discourages use of nnn.nnn.nnn.nnn as permitted sender)
X-ALLOW: ALLOWED SENDER FOUND
X-Virus-Scan: V-
X-Note: Spam Tests Failed:
X-Note: Mail Class: ALLOWEDSENDER
X-MS-Exchange-Organization-CompAuthRes: pass
X-MS-Exchange-Organization-CompAuthReason: 100
X-MS-Exchange-Organization-SenderRep-Score: 3
X-MS-Exchange-Organization-SenderRep-Data:
IpClassLargeGrayOther_GrayOther_GrayOther
X-MS-Exchange-Organization-VBR-Class: GrayOther
X-MS-Exchange-Organization-HMATPModel-Spf: 3
X-MS-Exchange-Organization-HMATPModel-Recipient:
X-MS-Exchange-Organization-TransportTrafficType: Email
X-MS-PublicTrafficType: Email
X-MS-Exchange-Organization-MessageLatency:
X-MS-Exchange-Organization-Auth-DmarcStatus: Pass
X-MS-Exchange-Organization-VerifiedDkimDomainsList: domain.com;domain.com
Microsoftsomaji Thanks, I understand your issue I believe, and would expect that your allow list entry would not fix it, as it looks to be from what you've posted, a personal block list overriding the verdict. - can you please let me know the "SFV:" verdict in the headers of one of the affected emails? - I'm expecting to see SFV:BLK
Anti-spam message headers - Office 365 | Microsoft Learn
- I do see SFV:BLK in the header.
- Ben_Harris
somaji - Perfect, in which case this text from the documentation should be of assistance.
Filtering was skipped and the message was blocked because it was sent from an address in a user's Blocked Senders list.For more information about how admins can manage a user's Blocked Senders list, see Configure junk email settings on Exchange Online mailboxes.
Thanks 🙂
Ben.