Set a alert about mail forward

[CHEUNG Peter]

Hi all,

Today we a user has received many  bounce back mail is about 'Undeliverable: xxxxxxxxx' messages  

after we investigation and check Office365Alerts mail we found  a user account has hacked, and set a mail forward,  

i would like to know can the set the Alerts rule only for forward outside organization or the IP address out of office. because the system default Alerts mail include  UpdateInboxRules.

[#2]

You will need to create a custom alert and tie it to the corresponding action. Sadly, I don't believe the action of configuring OOO replies is being audited currently.