Emails Quarantined but shouldn't be

[00Leavii715]

I have emails being quarantined by O365, but they don't need to be. 

Below is my header, and SPF query from kitterman.com but with my domains filtered out.  The SPF includes the subdomain tnwf.mydomain.com which is bound to the IP shown in my header.

SPF Query:

SPF record lookup and validation for: companydomain.net

SPF records are published in DNS as TXT records.

The TXT records found for your domain are:
v=spf1 a:ilcf.companydomain.net a:tncf.companydomain.net a:tnwf.companydomain.net include:spf.protection.outlook.com -all
MS=ms36863690

Checking to see if there is a valid SPF record.

Found v=spf1 record for companydomain.net:
v=spf1 a:ilcf.companydomain.net a:tncf.companydomain.net a:tnwf.companydomain.net include:spf.protection.outlook.com -all

evaluating...
Results - record processed without error.

The result of the test (this should be the default result of your record) was, pass . The explanation returned was, sender SPF authorized

Header:

Received: from MW2NAM10FT005.eop-nam10.prod.protection.outlook.com
(2a01:111:e400:7e87::49) by
MW2NAM10HT074.eop-nam10.prod.protection.outlook.com (2a01:111:e400:7e87::372)
with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5081.15; Tue, 22 Mar
2022 17:34:49 +0000
Received: from NAM04-DM6-obe.outbound.protection.outlook.com (104.47.73.40) by
MW2NAM10FT005.mail.protection.outlook.com (10.13.154.75) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.5081.15 via Frontend Transport; Tue, 22 Mar 2022 17:34:49 +0000
Received: from CO2PR04CA0126.namprd04.prod.outlook.com (2603:10b6:104:7::28)
by MN2PR07MB6608.namprd07.prod.outlook.com (2603:10b6:208:168::15) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5102.16; Tue, 22 Mar
2022 17:34:42 +0000
Received: from MW2NAM10FT005.eop-nam10.prod.protection.outlook.com
(2603:10b6:104:7:cafe::52) by CO2PR04CA0126.outlook.office365.com
(2603:10b6:104:7::28) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5102.17 via Frontend
Transport; Tue, 22 Mar 2022 17:34:42 +0000
Authentication-Results: spf=fail (sender IP is 51.224.85.41)
smtp.mailfrom=mydomain.com; dkim=none (message not signed)
header.d=none;dmarc=fail action=none header.from=mydomain.com;compauth=fail
reason=001
Received-SPF: Fail (protection.outlook.com: domain of mydomain.com does not
designate 51.224.85.41 as permitted sender) receiver=protection.outlook.com;
client-ip=51.224.85.41; helo=TN-Shoretel-HQ-Server;
Received: from TN-Shoretel-HQ-Server (51.224.85.41) by
MW2NAM10FT005.mail.protection.outlook.com (10.13.154.75) with Microsoft SMTP
Server id 15.20.5081.15 via Frontend Transport; Tue, 22 Mar 2022 17:34:41
+0000
Received: from mail pickup service by TN-Shoretel-HQ-Server with Microsoft SMTPSVC;
Tue, 22 Mar 2022 12:34:41 -0500
thread-index: Adg+ExxqLcbCGqkaSyG5TaoqGHSQQw==
Thread-Topic: Mitel voice message from user, 556 for mailbox 605
From: "Mitel Voice Mail" <Email address removed>
To: <Email address removed>
Subject: Mitel voice message from user, 556 for mailbox 605
Date: Tue, 22 Mar 2022 12:34:40 -0500
Keywords: {"SHORETEL_INFO":"VMSync","DN":"605","ID":"G6844FEAA","WAV":true,"GUID":"779cfe9a-1e22-4e89-a688-7180bb50915a"}
Message-ID: <Email address removed>
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE
X-OriginalArrivalTime: 22 Mar 2022 17:34:41.0152 (UTC) FILETIME=[1C89C000:01D83E13]
Return-Path: Email address removed
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: baff8c83-6d7f-4795-bc0d-e2616779c4d3:0
X-MS-Office365-Filtering-Correlation-Id: af8f240e-a038-40d1-ccc7-08da0c2a3f70
X-MS-TrafficTypeDiagnostic:
MN2PR07MB6608:EE_
MW2NAM10FT005:EE_
MW2NAM10HT074:EE_
X-Forefront-Antispam-Report:
CIP:51.224.85.41;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:TN-Shoretel-HQ-Server;PTR:InfoDomainNonexistent;CAT:SPOOF;SFS:(13230001)(564344004)(37786003)(1096003)(7416002)(6862004)(33656002)(81166007)(77540400001)(5660300002)(21480400003)(44726023)(8426002)(8676002)(9686003)(450100002)(356005)(86362001)(36756003)(336012)(15650500001)(426003)(26005)(83380400001)(44706002);DIR:INB;
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
=?iso-8859-1?Q?YZ9pw6CmY359blmHInGJthrxnDkXPJHTPMFJ/0iCbQSQjnZWD2lV3uN6st?=
=?iso-8859-1?Q?NDbFK1XzWBLOT0BUThpG6TqReV3j5HyPgFW1xnMKFPymtSvxhiRhe0/uS5?=
=?iso-8859-1?Q?ah+yhTkrBrYxegPoZYmihaOxRKC/cyWCfS27e/qd7g1USNUc12Zlok8z/d?=
=?iso-8859-1?Q?Zs22Ufjdm/zj7qp8Fs80AliiN1MPG5cF1HnVM8YkLpMdOsN2OGiHUBqTNs?=
=?iso-8859-1?Q?G4k/xW2/CM8QzF4aYLB6QayY6iShbikXMI4XrlqZ688vtL2+uvMVj9Aqhg?=
=?iso-8859-1?Q?jw3127gpSo2+V07+iu6/0BdGbwlsw1gt1ObxCFPQ7HQY0u2+6MhJ2PpJhD?=
=?iso-8859-1?Q?W/QhNnteAhSFqvqgAdh5AesIwIJx74nhhZWxpSFTAs9zjAXF2691vO5Szq?=
=?iso-8859-1?Q?6UppD9zGxvn+/DLseWx2J54ZkbHZhvVoDwshIABnW1qCR/WLGsUifY09S1?=
=?iso-8859-1?Q?qcZy0lO6anbTtS4+OZoW6DJYKQ2ZPjLFLhwgL3YzZbELhmLzfiVaccCY6W?=
=?iso-8859-1?Q?yqxzdg+ETnlIKX8cP/+tT138uskPwkwCSqvzEIW2NSjoRWqQuZu/KPsPzh?=
=?iso-8859-1?Q?Pg5Hvp8IxCnpM7Sc8wSBjulunhHhRYQQ87EwSsPE2/Vcq0k1Jm3AWiaINg?=
=?iso-8859-1?Q?L/9uRXu9Br2V6XlO7hvML+Ume/N7Z61GubU8J3qTGPyhzCvWLaSmdFshW9?=
=?iso-8859-1?Q?RfE5zZRCjU7IAPH4mHvIc7MI4D9s9uE/4tfrlyUnKNlbDaB4peAfaXa0tA?=
=?iso-8859-1?Q?EuclmY5kRCDVQEMwMjO2ZKppmcks27mKJtjPJQgZDKK7MppKxpwZO3WveV?=
=?iso-8859-1?Q?m/710fWtP73A5WL2b2yK8Qmc0LzHLfj1XX5nwfp/ID+HgJXmMIwP63Ok4d?=
=?iso-8859-1?Q?qNduceZ1TbFSr7Q/ulPNUOWpSYp/t3KQTsw177DDGns53Jf9jJ76fI1G2o?=
=?iso-8859-1?Q?Cl2KJnGjjR5zHagRbad5+VvkKDOTYfZgYo42OdiuIVSiPHWQ2DQqSocsVO?=
=?iso-8859-1?Q?3q3qjMN8W7oC9hookfr5o21TD5VwKL9fWrH9WEC0Dj6i3InOONHUnpBDLI?=
=?iso-8859-1?Q?qpDz49nOEaMeS86w5/kVQIZQxcoPazz8k+tpmbxzT50ClvveW9VdoX05/R?=
=?iso-8859-1?Q?vuvAPWxV8kOTlO3UicWBpZixVkavM7h0gG1dRjQZm6ZDok/7U/blpnYdU+?=
=?iso-8859-1?Q?83G7VhIxi3Xfm8i+BqDZa1pgQ/9T2D5017hjjt8kqJdFzpIv61l3VnYCTD?=
=?iso-8859-1?Q?xmeizg35YD+1ynM7BTo9p7VKpdGfHS1spMDKb4JOvmMnsCQaTR2Mrpr6Yo?=
=?iso-8859-1?Q?dDN37UOvOXKRI/1ZJyuHGZbpAFncvGswMCXgsmixfz6c+023Y0CVEbQRW6?=
=?iso-8859-1?Q?h8fkY86OQwhLEe8W8LR2Hj/q+8MJZ/WldvStJEDBWVmqRV9eM38ykfLDSd?=
=?iso-8859-1?Q?j01iA3oIzGnXnCS2X4WbmcF/seb6Jg5u6OUFKw1+OZuFzZW8ggkqZQjw4r?=
=?iso-8859-1?Q?k/EQaVNZoFwb6MFZHVqo6m5+qJ0AxESw4in3Ia3Jj+5OsIaf0PBDB+jyc/?=
=?iso-8859-1?Q?melKv6HJ3PGSBNvvjOCrb+wHRhLhBsrEUfFqitD0gXSUm1NhSix8UFDv0b?=
=?iso-8859-1?Q?wbKUJf34xSezL5Iwqzz5rU522o6j3f42E+HZy7UYcJj3BqJudFFGw500xB?=
=?iso-8859-1?Q?VBPcsgTdHBu+2GYcr0uFnHWyT60lvmoyA7+tLu84LmVUj+cvXfQPlVMTuK?=
=?iso-8859-1?Q?JDUT1VoTtypAKZ5o2dYGVdc4K2LZ0OmMi6qutW8XnjIHGGoU96pBL32iQx?=
=?iso-8859-1?Q?wmv/nZ2ILjcwZD4x8AfysulsMOJYmgXy1kN6YeHtLpFjmjT+lUaqJ4OH9U?=
=?iso-8859-1?Q?NwmKwsNHZd3awuNguy+tWPCbKR5/buZdPp0506kX4xyPF3BFzj30eR34oT?=
=?iso-8859-1?Q?x+te23Nfk2l9t7H4JwDQ0dpb5tvZKMXlai28mKYezIweVYOuVDHxYilv3C?=
=?iso-8859-1?Q?KSiobpI8TreYoz/eFm9FO5cbIoFqLSMNhxOdMn2vykX7PzbxIkVJ7TNm6B?=
=?iso-8859-1?Q?CjWUortWGSc6pBYcRoRLIIezsVOal02BjM+IzxSBKgH7Lev9s4D2zDgM50?=
=?iso-8859-1?Q?XrvLUmd92YS7Z1TetbFm7SfzVcYb0uz6ENjoIM54XkWh/K54UTV2Xi9pk9?=
=?iso-8859-1?Q?iCoXRIezGBdPfvPPTdyzcLSmYIwTd0jW7PfQine5B6JQDLDN5yOduJybz4?=
=?iso-8859-1?Q?dMyMCTdlKaDcW5Cwp61/9dmFH5eBeJfaLWjz2sQiuCseQkXMnW3nHKfDIZ?=
=?iso-8859-1?Q?19FR6/HLGc8AUq+sjupj0CQlPVKo+4zpN/+a1F8x/Qdv+Bg1JQK+QYHA3C?=
=?iso-8859-1?Q?rk99fYOf5n1VzZWEhQy77T6y/b+ChfnqER0oAdQCYF?=
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR07MB6608
X-EopAttribution-RoutedToQuarantineCount: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped:
MW2NAM10FT005.eop-nam10.prod.protection.outlook.com
X-MS-PublicTrafficType: Email
X-OriginatorOrg: companydomain.net