Forum Discussion
Tenant Allow/Block Lists Versus Anti-spam List
- The Tenant Allow/Block list applies to your whole tenancy. Anti-spam policies can apply to specific domains, recipients or groups of recipients, and you can have several polices. If you have a persistent spammer who regularly morphs, have you checked to see if spammy (a) has a consistent sending IP address range that (b) is not shared with many more legitimate senders?
Thank you for your message. Although I have a corporate account, I am the sole tenant. I want my blocks to apply to me and anyone else that I decide to add to my corporate account. I find the Tenant Block/Allow List easier to input data than Anti-Spam policy lists. So that is what I will use going forward.
Regarding your questions if I have checked to see if spammy (a) has a consistent sending IP address range that (b) is not shared with many more legitimate senders?
I am not sure how to do that. I have enclosed four screenshots from two different spam emails from the same sender. 1-A and 1-B are two screenshots from Message Header Analyzer for one spam email. The same applies to my screenshots 2-A and 2-B.
The IP addresses differ slightly, but that they are probably from the same range. Are they shared with legitimate senders? I do not know.
I found it interesting that both spam emails passed SPF and dkim but not dmarc.
If these screenshots are exposing sensitive information, please let me know. I can either delete this post entirely or delete the attachments.
DMARC is failing because SPF and DKIm are "not aligned"
SPF and DKIM in this mail is from Amaazon SES mail domain and Sender domain is morningnewscatcher.com
So even if SPF and DKIm are proper, they are not from the sender domain and DMARC will fail.
