Customize recipient notification

%3CLINGO-SUB%20id%3D%22lingo-sub-3003044%22%20slang%3D%22en-US%22%3ECustomize%20recipient%20notification%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3003044%22%20slang%3D%22en-US%22%3E%3CP%3EIn%20the%20EAC-%26gt%3BMailflow-%26gt%3BRules%2C%20does%20anyone%20know%20if%20it's%20possible%20to%20include%20the%20from%20email%20address%20and%20subject%20line%20in%20the%20message%20sent%20to%20a%20user%20when%20an%20email%20is%20blocked%3F%20For%20instance%2C%20I%20have%20a%20rule%20to%20block%20certain%20phrases%20in%20the%20subject%20line%20that%20sends%20the%20user%20a%20notification%20that%20it%20was%20sent%20to%20quarantine%20when%20blocked%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3E%3CEM%3EBlock%20by%20subject%3C%2FEM%3E%3C%2FSTRONG%3E%3C%2FP%3E%3CDIV%3E%3CP%3E%3CEM%3EIf%20the%20message...%3C%2FEM%3E%3C%2FP%3E%3CDIV%3E%3CP%3E%3CEM%3EIncludes%20these%20patterns%20in%20the%20message%20subject%3A%20'Example1'%20or%20'Example2'%20or...%3C%2FEM%3E%3C%2FP%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%3E%3CP%3E%3CEM%3EDo%20the%20following...%3C%2FEM%3E%3C%2FP%3E%3CDIV%3E%3CP%3E%3CEM%3ESet%20audit%20severity%20level%20to%20'Medium'%3CBR%20%2F%3Eand%20Generate%20recipient%20notification%20and%20include%20the%20following%20content%3A%20'%3C%2FEM%3E%3CSTRONG%3E%3CEM%3EAn%20email%20with%20the%20subject%20of%20this%20message%20has%20been%20quarantined.%20The%20rule%20that%20was%20used%20was%20%22Block%20by%20subject%22.%3C%2FEM%3E%3C%2FSTRONG%3E%3CEM%3E'%3CBR%20%2F%3Eand%20Deliver%20the%20message%20to%20the%20hosted%20quarantine.%3C%2FEM%3E%3C%2FP%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EEven%20though%20the%20notification%20they%20get%20has%20the%20subject%20line%20of%20the%20blocked%20email%20in%20the%20subject%20line%20of%20the%20notification%20email%2C%20I%20was%20wondering%20if%20there%20were%20any%20system%20variables%20we%20could%20use%20in%20the%20recipient%20notifications%20that%20would%20tell%20them%20again.%20For%20instance%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3E...%3C%2FEM%3E%3C%2FP%3E%3CP%3E%3CEM%3Eand%20Generate%20recipient%20notification%20and%20include%20the%20following%20content%3A%20'%3C%2FEM%3E%3CSTRONG%3E%3CEM%3EAn%20email%20with%20the%20subject%20%22VAR_SUBJECT%22%20from%20the%20email%20address%20%22VAR_FROMADDRESS%22%20has%20been%20quarantined.%20The%20rule%20that%20was%20used%20was%20%22Block%20by%20subject%22.%3C%2FEM%3E%3C%2FSTRONG%3E%3CEM%3E'%3C%2FEM%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EToo%20many%20times%20users%20do%20not%20read%20the%20subject%20line%20and%20ask%20me%20what%20it's%20about%20and%20who%20it's%20from%20before%20they%20ask%20me%20to%20release%20it%20(we're%20not%20licensed%20enough%20to%20have%20the%20users%20release%20them%20themselves).%20Was%20hoping%20that%20this%20would%20make%20it%20easier%20for%20them%20to%20identify%20whether%20it's%20something%20they%20were%20expecting%20or%20just%20junk.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20all%20in%20advance!%3C%2FP%3E%3CP%3EKDubya%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-3003044%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3004360%22%20slang%3D%22en-US%22%3ERe%3A%20Customize%20recipient%20notification%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3004360%22%20slang%3D%22en-US%22%3ENo%2C%20not%20possible%20with%20the%20OOTB%20functionality.%20To%20get%20something%20like%20that%2C%20you'd%20need%20a%20custom%20transport%20agent%2C%20and%20such%20are%20not%20available%20in%20Exchange%20Online.%20Unless%20you%20want%20to%20redirect%20the%20mail%20flow%20to%20another%20system%2C%20before%20delivering%20it%20to%20O365.%3C%2FLINGO-BODY%3E
Occasional Visitor

In the EAC->Mailflow->Rules, does anyone know if it's possible to include the from email address and subject line in the message sent to a user when an email is blocked? For instance, I have a rule to block certain phrases in the subject line that sends the user a notification that it was sent to quarantine when blocked:

 

Block by subject

If the message...

Includes these patterns in the message subject: 'Example1' or 'Example2' or...

Do the following...

Set audit severity level to 'Medium'
and Generate recipient notification and include the following content: '
An email with the subject of this message has been quarantined. The rule that was used was "Block by subject".'
and Deliver the message to the hosted quarantine.

 

Even though the notification they get has the subject line of the blocked email in the subject line of the notification email, I was wondering if there were any system variables we could use in the recipient notifications that would tell them again. For instance:

 

...

and Generate recipient notification and include the following content: 'An email with the subject "VAR_SUBJECT" from the email address "VAR_FROMADDRESS" has been quarantined. The rule that was used was "Block by subject".'

 

Too many times users do not read the subject line and ask me what it's about and who it's from before they ask me to release it (we're not licensed enough to have the users release them themselves). Was hoping that this would make it easier for them to identify whether it's something they were expecting or just junk.

 

Thank you all in advance!

KDubya

 

2 Replies
No, not possible with the OOTB functionality. To get something like that, you'd need a custom transport agent, and such are not available in Exchange Online. Unless you want to redirect the mail flow to another system, before delivering it to O365.
Not natively. You can create a combination of a transport rule and a Power Automate flow to do what you want.