Mail is forwarding, but I don't know why

%3CLINGO-SUB%20id%3D%22lingo-sub-1958155%22%20slang%3D%22en-US%22%3EMail%20is%20forwarding%2C%20but%20I%20don't%20know%20why%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1958155%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20working%20with%20an%20inherited%20setup%3A%20O365%20with%20Azure%20AD%20used%20to%20tie%20into%20our%20local%20AD.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20an%20address%20%22service%40mydomain.com%22%20that%20is%20forwarding%20to%20a%20vendor%20at%20%22old_service%40external.com%22.%20I%20need%20to%20to%20forward%20to%20%22new_service%40external.com%22%20instead%2C%20but%20I%20can't%20figure%20out%20where%20to%20make%20this%20change.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22mailto%3Aservice%40mydomain.com%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Eservice%40mydomain.com%3C%2FA%3E%26nbsp%3Bhas%20no%20licenses%20assigned%20in%20o365%20and%20so%20doesn't%20have%20a%20mailbox%20or%20forwarding%20rules%2C%20the%20user%20doesn't%20exist%20on%20our%20local%20AD%20server%2C%20it's%20not%20a%20distribution%20list%20or%20group%2C%20and%20I%20see%20no%20mail%20rules%20in%20Exchange%20admin%20center%20that%20would%20forward%20this%20user's%20mail%2C%20and%20we%20have%20no%20connectors%20set%20up.%20The%20user%20does%20show%20up%20in%20Azure%20AD%2C%20but%20I%20don't%20see%20anything%20related%20to%20mail%20forwarding%20(and%20don't%20expect%20to).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20I%20do%20a%20mail%20trace%20on%20this%20address%2C%20all%20mail%20statuses%20are%20%22resolved%22%20and%20I%20see%20this%20under%20%22More%20information%22%3C%2FP%3E%3CP%3E%22Messages%20sent%20to%20the%20recipient%20are%20being%20forwarded%20to%20the%20following%20address.%3C%2FP%3E%3CP%3EExternal%20address%3A%20%3CA%20href%3D%22mailto%3Aservice%40external.com%26quot%3B%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Eservice%40external.com%22%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20ideas%20for%20how%20this%20thing%20could%20be%20set%20up%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1958155%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1958723%22%20slang%3D%22en-US%22%3ERe%3A%20Mail%20is%20forwarding%2C%20but%20I%20don't%20know%20why%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1958723%22%20slang%3D%22en-US%22%3EHi%2C%20sounds%20like%20an%20outbound%20spam%20filter%20policy%20is%20configured.%20If%20not%20verified%2C%20you%20can%20go%20here.%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fprotection.office.com%2Fantispam%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fprotection.office.com%2Fantispam%3C%2FA%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

I'm working with an inherited setup: O365 with Azure AD used to tie into our local AD.

 

I have an address "service@mydomain.com" that is forwarding to a vendor at "old_service@external.com". I need to to forward to "new_service@external.com" instead, but I can't figure out where to make this change.

 

service@mydomain.com has no licenses assigned in o365 and so doesn't have a mailbox or forwarding rules, the user doesn't exist on our local AD server, it's not a distribution list or group, and I see no mail rules in Exchange admin center that would forward this user's mail, and we have no connectors set up. The user does show up in Azure AD, but I don't see anything related to mail forwarding (and don't expect to).

 

If I do a mail trace on this address, all mail statuses are "resolved" and I see this under "More information"

"Messages sent to the recipient are being forwarded to the following address.

External address: service@external.com"

 

Any ideas for how this thing could be set up?

2 Replies

Hi, sounds like an outbound spam filter policy is configured. If not verified, you can go here.

https://protection.office.com/antispam

 

https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/external-email-forwardin...

If you are getting results in message trace, you obviously have some recipient object for said address within the tenant. Use Get-Recipient to find the matching object and check its properties for forwarding. Running a Detailed message trace should give you some additional information as well (Get-MessageTraceDetail).