How to allow an email domain without using message rule (permanently)

I read every documentation with microsoft, i feel a little bit lost : https://learn.microsoft.com/fr-ca/microsoft-365/security/office-365-security/create-safe-sender-lists-in-office-365?view=o365...

Microsoft Defender for Office 365

EtienneFiset

Brass Contributor

Thanks Ben, but that is not really accurate with what i wrote.... you say in another words the same thing as me but you forgot to take in consideration the rest of the text. What is the solution to allow a domain email without using message rule or submission ?

Regards

Ben_Harris

Microsoft

Jan 16, 2023

EtienneFiset The correct solution is to not do it at all, as this poses a security risk to your organisation and as mentioned in the post I linked with another reply, fixing the root cause is the best way to move forward. - so, we don't have a recommendation apart from to fix the underlying reason for requiring the allow if that makes sense.

If you really wish to achieve this (it will not work for high confidence phish) and are happy to accept the risks of allowing a domain / sender, you should use the steps in the documentation you linked to create a transport rule, being sure to have more than one condition defined (step 2 in the "Use Mail flow Rules" section of the documentation.

Hope that helps

Ben.

Forum Discussion

How to allow an email domain without using message rule (permanently)

Share

Resources