Set a alert about mail forward

%3CLINGO-SUB%20id%3D%22lingo-sub-758211%22%20slang%3D%22en-US%22%3ESet%20a%20alert%20about%20mail%20forward%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-758211%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%3CBR%20%2F%3E%3CBR%20%2F%3EToday%20we%20a%20user%20has%20received%20many%26nbsp%3B%20bounce%20back%20mail%20is%20about%20'Undeliverable%3A%20xxxxxxxxx'%20messages%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eafter%20we%20investigation%20and%20check%20Office365Alerts%20mail%20we%20found%26nbsp%3B%26nbsp%3Ba%20user%20account%20has%20hacked%2C%20and%20set%20a%20mail%20forward%2C%26nbsp%3B%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3Ei%20would%20like%20to%20know%20can%20the%20set%20the%26nbsp%3BAlerts%20rule%20only%20for%20forward%20outside%20organization%20or%20the%20IP%20address%20out%20of%20office.%20because%20the%20system%20default%26nbsp%3BAlerts%20mail%20include%26nbsp%3B%20UpdateInboxRules.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-758211%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-758410%22%20slang%3D%22en-US%22%3ERe%3A%20Set%20a%20alert%20about%20mail%20forward%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-758410%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20will%20need%20to%20create%20a%20custom%20alert%20and%20tie%20it%20to%20the%20corresponding%20action.%20Sadly%2C%20I%20don't%20believe%20the%20action%20of%20configuring%20OOO%20replies%20is%20being%20audited%20currently.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hi all,

Today we a user has received many  bounce back mail is about 'Undeliverable: xxxxxxxxx' messages  

 

after we investigation and check Office365Alerts mail we found  a user account has hacked, and set a mail forward,  

i would like to know can the set the Alerts rule only for forward outside organization or the IP address out of office. because the system default Alerts mail include  UpdateInboxRules.

1 Reply
Highlighted

You will need to create a custom alert and tie it to the corresponding action. Sadly, I don't believe the action of configuring OOO replies is being audited currently.