I got this advise from our supplier to add this here. Currently we notice that one of the IP ranges from M365 exchange servers is not added to the default spf rule. And looking online we are not ...
It would be useful to see the headers from one of the affected messages. Redact any sensitive information beforehand.