Category: spoof

  • Why You Should Duplicate Your Microsoft 365 Preset Security Policies

    Why You Should Duplicate Your Microsoft 365 Preset Security Policies

    If you manage Microsoft 365 security, you might well have noticed the Standard Preset Security Policy as a baseline protection for Exchange Online, Office and Teams protections. It’s a sensible choice — Microsoft maintains it, it’s kept up to date with best-practice settings, and it covers anti-spam, anti-malware, and anti-phishing policies as well as Safe Links and…

  • Improving Exchange Online Email Deliverability Through Third Party Filtering Services – Trusted ARC Sealer

    Improving Exchange Online Email Deliverability Through Third Party Filtering Services – Trusted ARC Sealer

    When you receive emails into Exchange Online and you filter the external messages before arrival with a third party filter such as Mimecast, Proofpoint or others, then you can have DMARC failures that result in messages being junked or quarantined in Exchange Online. Trusted ARC Sealer is a feature of Exchange Online to allow you…

  • DMARC Quarantine Issues

    I saw the following error with a client the other day when sending emails from the client to any of the Virgin Media owned consumer ISP email addresses (virginmedia.com, ntlworld.com, blueyonder.com etc.) mx3.mnd.ukmail.iss.as9143.net gave this error:vLkg1v00o2hp5bc01Lkg9w DMARC validation failed with result 3.00:quarantine In the above, the server name (…as9143.net) might change as will the value…

  • Get-SpoofMailReport in EOP

    Using Office 365 or EOP to protect your email and worried about spoofed emails? Then try this cmdlet in Remote PowerShell for EOP: PS C:\Users\brian.reid> Get-SpoofMailReport Date                Event Type Direction Domain Action       Spoofed Sender              True Sender     Sender IP—-                ———- ——— —— ——       ————–              ———–     ———14/04/2016 00:00:00 SpoofMail  Inbound          GoodMail     no-reply@domain.com         mandrillapp.com 198.2.186.0/2418/04/2016 00:00:00 SpoofMail  Inbound         …