Whitelist external senders to a 365 group

[Eric_H]

I generally want to block external email traffic to our 365 Groups.  However, we have some external systems producing alerts or updates that I want to deliver to a 365 Group.  That way users who are following can get those emails, or even stop following if they don't want that level of detail.  So I've enabled external sending to the 365 group, and then used an Exchange mail flow rule to control who can send emails to the group address.  The problem is that the members of that group (the subscribers) are still receiving the email.  It's as if the mail flow rule gets processed AFTER the email has already been distributed to the members.  So the rule stops the external emails from delivering to Group@domain.com (good), but still deliver to user1@dober.com (not good).  

Is there a way to whitelist certain external senders to a 365 Group email?  Anyone know why the mail flow rule is affecting the group email address, but not the members?  My only resolution is to have an old school distribution list to send the alerts to and control the membership manually.

Attached is how the mail flow rule is configured.  

[#2 · Accepted solution]

You can use the standard message delivery parameters:

AcceptMessagesOnlyFrom : {}
AcceptMessagesOnlyFromDLMembers : {}
AcceptMessagesOnlyFromSendersOrMembers : {}
RejectMessagesFrom : {}
RejectMessagesFromDLMembers : {}
RejectMessagesFromSendersOrMembers : {}

[#3]

@Vasil Michev, I had looked at this but got caught up on the external email address (the parameter only allows you to add users).  Then it occurred to me I could create a contact with the inbound email address, and add that contact to the message delivery parameters.  That works!  Thanks for the help!   For others looking, here's Microsoft's documentation on configuring delivery restrictions: https://docs.microsoft.com/en-us/exchange/recipients/user-mailboxes/message-delivery-restrictions?vi...

And if using powershell, you have to use "set-unifiedgroup" commands instead of "set-mailbox", but the concept is the same.