Office 365 Exchange Online server blacklisted

%3CLINGO-SUB%20id%3D%22lingo-sub-31743%22%20slang%3D%22en-US%22%3EOffice%20365%20Exchange%20Online%20server%20blacklisted%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-31743%22%20slang%3D%22en-US%22%3E%3CP%3EAt%2010%3A20AM%2024%20Nov%20AEST%20I'm%20seeing%20reports%20that%20Office%20365%20Exchange%20Online%20server%26nbsp%3Bmail-me1aus01hn0228.outbound.protection.outlook.com%20is%20appearing%20on%20different%20blacklist%20sources%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22http%3A%2F%2Fmxtoolbox.com%2FSuperTool.aspx%3Faction%3Dblacklist%253a104.47.116.228%26amp%3Brun%3Dtoolpage%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fmxtoolbox.com%2FSuperTool.aspx%3Faction%3Dblacklist%253a104.47.116.228%26amp%3Brun%3Dtoolpage%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20raised%20a%20support%20ticket%20but%20thought%20I'd%20post%20in%20here%20in%20case%20anyone%20else%20is%20impacted.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt's%20preventing%20one%20of%20our%20clients%20emailing%20payslips%20to%20staff%20who%20have%20hotmail.com%20etc%20addresses%20or%20any%20personal%20address%20being%20protected%20by%20blacklist%20checks.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWill%20update%20this%20when%20Microsoft%20have%20resolved.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E-Sonia%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-31743%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-35312%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Online%20server%20blacklisted%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-35312%22%20slang%3D%22en-US%22%3E%3CP%3EOK%2C%20thanks.%20I'll%20get%20her%20to%20retry%20in%20the%20morning%20and%20will%20log%20a%20new%20call%20with%20support%20if%20we%20need%20to.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E-Sonia%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-35288%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Online%20server%20blacklisted%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-35288%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F8023%22%20target%3D%22_blank%22%3E%40Sonia%20Cuff%3C%2FA%3E%20No%2C%20none%20of%20our%20customers%20reported%20a%20problem%20like%20this%20since%20this%20one%20was%20resolved.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-35250%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Online%20server%20blacklisted%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-35250%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F3194%22%20target%3D%22_blank%22%3E%40Peter%20Klapwijk%3C%2FA%3E%26nbsp%3BAre%20you%20seeing%20this%20again%3F%20We%20had%20a%20different%20client%20contact%20us%20today%20with%20a%26nbsp%3Bnon-suspicious%20email%20that%20had%20been%20blocked%20via%20the%20blacklisted%20high%20risk%20server%20again.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-32334%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Online%20server%20blacklisted%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-32334%22%20slang%3D%22en-US%22%3E%3CP%3EI%20see%2C%20thanks%20for%20the%20link%20Peter%2C%20that%20was%20helpful.%3C%2FP%3E%3CP%3EI've%20been%20called%20today%20to%20say%20the%20Microsoft%20have%20fixed%20our%20issue%20which%20was%20impacting%20about%2020%20customers.%20I'm%20just%20about%20to%20retest%20it.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E-Sonia%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-32166%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Online%20server%20blacklisted%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-32166%22%20slang%3D%22en-US%22%3EOk%2C%20but%20the%20issue%20was%20all%20email%20send%20to%20Hotmail%2C%20Gmail%20etc%20was%20send%20via%20the%20High%20Risk%20Delivery%20Pool%20and%20that%20issue%20was%20solved.%20Yes%20this%20pool%20of%20servers%20is%20still%20on%20the%20blacklist%2C%20but%20this%20is%20not%20the%20server%20pool%20which%20is%20used%20to%20send.%20Have%20a%20look%20at%20this%20article%20for%20more%20information%20about%20the%20server%20pool%3A%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechnet.microsoft.com%2Fen-GB%2Flibrary%2Fjj200746(v%3Dexchg.150).aspx%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Ftechnet.microsoft.com%2Fen-GB%2Flibrary%2Fjj200746(v%3Dexchg.150).aspx%3C%2FA%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-32022%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Online%20server%20blacklisted%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-32022%22%20slang%3D%22en-US%22%3E%3CP%3EMxtoolbox.com%20is%20still%20reporting%20that%20Exchange%20Online%20server%20as%20being%20blacklisted%20on%206%20different%20services.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-31922%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Online%20server%20blacklisted%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-31922%22%20slang%3D%22en-US%22%3E%3CP%3EMicrosoft%20confirmed%20the%20issue%20is%20resolved.%3CBR%20%2F%3EI%20don%60t%20see%20messages%20send%20through%20the%20high%20risk%20delivery%20pool%20anymore.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPeter%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-31908%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Online%20server%20blacklisted%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-31908%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20is%20where%20being%20an%20Exchange%20admin%20gets%20frustrating.%20On%20our%20own%20servers%2C%20we'd%20investigate%2C%20remediate%20and%20apply%20for%20the%20listing%20to%20be%20removed.%20With%20Exchange%20Online%2C%20Microsoft%20will%20do%20the%20same%20%26nbsp%3B...%20eventually.%20It%20just%20takes%20them%20longer.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOn%20the%20upside%20I%26nbsp%3Bnever%20need%20eseutil.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20we%20wait.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E-Sonia%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-31774%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Online%20server%20blacklisted%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-31774%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Sonia%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMaybe%20same%20issue%20as%20my%20customers%20have%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FExchange%2FExchange-Online-send-mail-through-high-risk-delivery-pool%2Fm-p%2F31640%23M414%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FExchange%2FExchange-Online-send-mail-through-high-risk-delivery-pool%2Fm-p%2F31640%23M414%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20see%20a%20lot%20of%20emails%20are%20send%20through%20the%20high%20risk%20delivery%20pool%20and%20yes%20this%20pool%20is%20on%20some%20blacklists%2C%20but%20the%20regular%20pool%20is%20not.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20spoke%20to%20a%20MS%20engineer%20yesterday%2C%20the%20see%20the%20last%20days%20more%20of%20this%20issues%20at%20customers%2C%20it%20is%20already%20escaleted%20to%20the%20team%20who%20is%20responsible%20for%20this.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPeter%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Frequent Contributor

At 10:20AM 24 Nov AEST I'm seeing reports that Office 365 Exchange Online server mail-me1aus01hn0228.outbound.protection.outlook.com is appearing on different blacklist sources 

http://mxtoolbox.com/SuperTool.aspx?action=blacklist%3a104.47.116.228&run=toolpage

 

I've raised a support ticket but thought I'd post in here in case anyone else is impacted.

 

It's preventing one of our clients emailing payslips to staff who have hotmail.com etc addresses or any personal address being protected by blacklist checks.

 

Will update this when Microsoft have resolved.

 

-Sonia

9 Replies
Highlighted

Hi Sonia,

 

Maybe same issue as my customers have: https://techcommunity.microsoft.com/t5/Exchange/Exchange-Online-send-mail-through-high-risk-delivery...

 

I see a lot of emails are send through the high risk delivery pool and yes this pool is on some blacklists, but the regular pool is not.

 

I spoke to a MS engineer yesterday, the see the last days more of this issues at customers, it is already escaleted to the team who is responsible for this.

 

Regards,

 

Peter

Highlighted

This is where being an Exchange admin gets frustrating. On our own servers, we'd investigate, remediate and apply for the listing to be removed. With Exchange Online, Microsoft will do the same  ... eventually. It just takes them longer.

 

On the upside I never need eseutil.

 

So we wait.

 

-Sonia

Highlighted

Microsoft confirmed the issue is resolved.
I don`t see messages send through the high risk delivery pool anymore.

 

Regards,

 

Peter

Highlighted

Mxtoolbox.com is still reporting that Exchange Online server as being blacklisted on 6 different services.

Highlighted
Ok, but the issue was all email send to Hotmail, Gmail etc was send via the High Risk Delivery Pool and that issue was solved. Yes this pool of servers is still on the blacklist, but this is not the server pool which is used to send. Have a look at this article for more information about the server pool:
https://technet.microsoft.com/en-GB/library/jj200746(v=exchg.150).aspx
Highlighted

I see, thanks for the link Peter, that was helpful.

I've been called today to say the Microsoft have fixed our issue which was impacting about 20 customers. I'm just about to retest it.

 

-Sonia

Highlighted

@Peter Klapwijk Are you seeing this again? We had a different client contact us today with a non-suspicious email that had been blocked via the blacklisted high risk server again.

Highlighted

Hi @Sonia Cuff No, none of our customers reported a problem like this since this one was resolved.

Highlighted

OK, thanks. I'll get her to retry in the morning and will log a new call with support if we need to.

 

-Sonia