SOLVED
Home

Possibility to raise the spam threshold for mailbox (Exchange online / Security & Compliance Center)

%3CLINGO-SUB%20id%3D%22lingo-sub-580669%22%20slang%3D%22en-US%22%3EPossibility%20to%20raise%20the%20spam%20threshold%20for%20mailbox%20(Exchange%20online%20%2F%20Security%20%26amp%3B%20Compliance%20Center)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-580669%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20folks%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ei'm%20not%20really%20sure%20where%20to%20post%20my%20question.%20I'll%20try%20my%20very%20best%3A%3C%2FP%3E%3CP%3EWe%20have%20the%20problem%2C%20that%20the%20last%20few%20days%202%20mailboxes%20were%20blocked%20in%20the%20Security%20%26amp%3B%20Compliance%20center.%20(%3CA%20href%3D%22https%3A%2F%2Fprotection.office.com%2Frestrictedusers%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fprotection.office.com%2Frestrictedusers%3C%2FA%3E)%3C%2FP%3E%3CP%3EOf%20course%20i%20can%20unblock%20them%20every%20time%2C%20but%20this%20wouldn't%20solve%20the%20problem.%3C%2FP%3E%3CP%3EI%20would%20like%20to%20raise%20the%20threshold%20for%20these%20two%20mailboxes%2C%20so%20that%20they%20wouldn't%20be%20blocked%20that%20fast.%3C%2FP%3E%3CP%3EA%20blockade%20of%20%22100%22%20is%20a%26nbsp%3B%20little%20bit%20to%20less.%20%3A%5C%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20help%20is%20highly%20appreciated.%3C%2FP%3E%3CP%3EThank%20you%20in%20forehand.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPatrick%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-580669%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Ecenter%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ECompliance%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESpam%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Ethreshold%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-580775%22%20slang%3D%22en-US%22%3ERe%3A%20Possibility%20to%20raise%20the%20spam%20threshold%20for%20mailbox%20(Exchange%20online%20%2F%20Security%20%26amp%3B%20Compliance%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-580775%22%20slang%3D%22en-US%22%3EHi!%3CBR%20%2F%3E%3CBR%20%2F%3EThese%20two%20articles%20should%20help%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fsecuritycompliance%2Fanti-spam-protection%23extra-information-if-you-receive-too-much-spam-in-office-365%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fsecuritycompliance%2Fanti-spam-protection%23extra-information-if-you-receive-too-much-spam-in-office-365%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Foffice365%2FSecurityCompliance%2Fconfigure-your-spam-filter-policies%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Foffice365%2FSecurityCompliance%2Fconfigure-your-spam-filter-policies%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EHope%20that%20answers%20your%20question%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-581313%22%20slang%3D%22en-US%22%3ERe%3A%20Possibility%20to%20raise%20the%20spam%20threshold%20for%20mailbox%20(Exchange%20online%20%2F%20Security%20%26amp%3B%20Compliance%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-581313%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F169605%22%20target%3D%22_blank%22%3E%40Christopher%20Hoard%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ethank%20you%20very%20much%20for%20your%20reply.%3C%2FP%3E%3CP%3EJust%20to%20make%20it%20really%20clear%20to%20me%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EQuote%20from%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Foffice365%2FSecurityCompliance%2Fconfigure-your-spam-filter-policies%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EDocs.ms%3C%2FA%3E%3A%3C%2FP%3E%3CBLOCKQUOTE%3E%3CP%3E%3CSPAN%3EOn%20the%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EAllow%20Lists%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3Bpage%2C%20you%20can%20specify%20entries%2C%20such%20as%20senders%20or%20domains%2C%20that%20will%20always%20be%20delivered%20to%20the%20inbox.%20Email%20from%20these%20entries%20is%20not%20processed%20by%20the%20spam%20filter.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20200px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F114160iFAF06FD0E6068F6F%2Fimage-size%2Fsmall%3Fv%3D1.0%26amp%3Bpx%3D200%22%20alt%3D%22sec_compl_settings.png%22%20title%3D%22sec_compl_settings.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FBLOCKQUOTE%3E%3CP%3EThis%20should%20do%20the%20trick%20to%20me.%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20i%20add%20a%20sender%2C%20the%20mails%20from%20this%20sender%20are%20never%20going%20through%20the%20spam%20filters%20at%20all%3F%3C%2FP%3E%3CP%3EThis%20could%20be%20okay%2C%20a%20better%20way%20would%20be%20to%20raise%20the%20threshold.%20Isn't%20it%3F%3C%2FP%3E%3CP%3E%3CSTRONG%3E(Or%20is%20this%20just%20a%20rule%20for%20inbound%20mails%3F)%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20usage%20of%20dkim%20wouldn't%20be%20proper%20solution%2C%20right%3F%3C%2FP%3E%3CP%3EThe%20recepients%20are%20often%20end-user%20customers%20with%20private%20domains%20or%20freemailer%2C%20no%20corporate%20domains.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20very%20much.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-581423%22%20slang%3D%22en-US%22%3ERe%3A%20Possibility%20to%20raise%20the%20spam%20threshold%20for%20mailbox%20(Exchange%20online%20%2F%20Security%20%26amp%3B%20Compliance%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-581423%22%20slang%3D%22en-US%22%3EThis%20is%20whitelisting%20the%20sender%2Fdomain.%20You%20can%20also%20do%20this%20by%20creating%20a%20transport%20rule%20in%20the%20Exchange%20Admin%20Console%20to%20bypass%20spam%20filtering.%3CBR%20%2F%3E%3CBR%20%2F%3EPart%20of%20a%20good%20anti-spoofing%20policy%20is%20to%20implement%20SPF%2C%20DKIM%20and%20DMARC%20if%20possible.%3CBR%20%2F%3E%3CBR%20%2F%3EHope%20that%20clarifies!%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-622252%22%20slang%3D%22en-US%22%3ERe%3A%20Possibility%20to%20raise%20the%20spam%20threshold%20for%20mailbox%20(Exchange%20online%20%2F%20Security%20%26amp%3B%20Compliance%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-622252%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F169605%22%20target%3D%22_blank%22%3E%40Christopher%20Hoard%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ejust%20as%20a%20feedback%3A%3C%2FP%3E%3CP%3EThe%20whitelisting%20doesn't%20have%20any%20effect.%3C%2FP%3E%3CP%3EBy%20the%20way%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fservicedescriptions%2Fexchange-online-service-description%2Fexchange-online-limits%23sending-limits%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EMicrosoft%20says%3C%2FA%3E%3A%26nbsp%3B%3C%2FP%3E%3CBLOCKQUOTE%3E%3CP%3E%3CSPAN%3EExchange%20Online%20customers%20who%20need%20to%20send%20legitimate%20bulk%20commercial%20email%20(for%20example%2C%20customer%20newsletters)%20should%20use%20third-party%20providers%20that%20specialize%20in%20these%20services.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FBLOCKQUOTE%3E%3CP%3ESo%20when%20im%20honest%3A%20Whe%20shouldn't%20find%20a%20solution%20to%20bypass%20this%20reglementations%2C%20even%20if%20i%20would%20like%20to%20do%20%3AD%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-622262%22%20slang%3D%22en-US%22%3ERe%3A%20Possibility%20to%20raise%20the%20spam%20threshold%20for%20mailbox%20(Exchange%20online%20%2F%20Security%20%26amp%3B%20Compliance%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-622262%22%20slang%3D%22en-US%22%3ESure%20-%20from%20experience%20here%20in%20the%20UK%20it%20is%20typically%20run%20through%20a%20third%20party%20app%20routing%20out%20to%20a%20third%20party%20AS%20which%20Office%20365%20also%20uses.%3CBR%20%2F%3E%3CBR%20%2F%3EThat%20way%2C%20no%20limits%20and%20no%20domains%20getting%20blacklisted!%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3C%2FLINGO-BODY%3E
Frequent Contributor

Hi folks,

 

i'm not really sure where to post my question. I'll try my very best:

We have the problem, that the last few days 2 mailboxes were blocked in the Security & Compliance center. (https://protection.office.com/restrictedusers)

Of course i can unblock them every time, but this wouldn't solve the problem.

I would like to raise the threshold for these two mailboxes, so that they wouldn't be blocked that fast.

A blockade of "100" is a  little bit to less. :\

 

Any help is highly appreciated.

Thank you in forehand.

 

Patrick

5 Replies
Highlighted

Hi @Christopher Hoard 

 

thank you very much for your reply.

Just to make it really clear to me:

 

Quote from Docs.ms:

On the Allow Lists page, you can specify entries, such as senders or domains, that will always be delivered to the inbox. Email from these entries is not processed by the spam filter.

sec_compl_settings.png

This should do the trick to me. 

When i add a sender, the mails from this sender are never going through the spam filters at all?

This could be okay, a better way would be to raise the threshold. Isn't it?

(Or is this just a rule for inbound mails?)

 

The usage of dkim wouldn't be proper solution, right?

The recepients are often end-user customers with private domains or freemailer, no corporate domains.

 

Thank you very much.

Highlighted
This is whitelisting the sender/domain. You can also do this by creating a transport rule in the Exchange Admin Console to bypass spam filtering.

Part of a good anti-spoofing policy is to implement SPF, DKIM and DMARC if possible.

Hope that clarifies!

Best, Chris
Highlighted

Hi @Christopher Hoard 

 

just as a feedback:

The whitelisting doesn't have any effect.

By the way: Microsoft says

Exchange Online customers who need to send legitimate bulk commercial email (for example, customer newsletters) should use third-party providers that specialize in these services.

So when im honest: Whe shouldn't find a solution to bypass this reglementations, even if i would like to do :D

 

Highlighted
Sure - from experience here in the UK it is typically run through a third party app routing out to a third party AS which Office 365 also uses.

That way, no limits and no domains getting blacklisted!

Best, Chris