Follow

O365 question from a Linux lady 

Anybody know if it's possible to make O365 quarantine an email if the sender and recipient are the same person?

I have a customer running Exchange on O365 and they're trying to block BCC spam. I took a look at it and don't see anything obvious in "Rules".

Admittedly I'm not an Exchange expert.

· · Web · 2 · 10 · 4

O365 question from a Linux lady 

@vkc so let’s say I (me@mydomain.com) want to send mail to a bunch of BCC recipients so I set the to recipient to the same email address? You want to block thay but otherwise not block the me @ email address above?

O365 question from a Linux lady 

@ultramagnus_tcv yup, that's the scenario. Basically, when one of their contacts (me@mydomain.com) gets their email hacked, they send BCCs to everyone in the contact list, and set the "to" as me@mydomain.com.

I don't know in advance who me@mydomain.com is, but I want to block any emails where sender and recip are the same (and are external, but that's an easy condition already).

O365 question from a Linux lady 

@vkc hmmm that’s a tough one. If the mailbox is hacked, that’s what O365 calls Inside the Organization and would skirt by Transport Rules I think. Also, the To doesn’t strictly have to be filled in. It can be blank, although maybe Exchange defaults it in the headers. I’d have to investigate. Do you have admin access to O365?

O365 question from a Linux lady 

@vkc this is a wacky way to do something similar but it works for outside the organization. I’m kind of amazed at the ingenuity. You have to have admin access to create the dynamic DL though. https://serverfault.com/questions/1051447/mail-flow-rule-for-email-without-an-internal-recipient

O365 question from a Linux lady 

@ultramagnus_tcv You know, that's pretty close to what I'm looking for. I'm just surprised they don't have it as a canned rule, though. Seems like low hanging fruit.

Thanks for sending it to me! I'll run this by them tomorrow to see if it works.

Sign in to participate in the conversation
MSP Social.net

A community centered on the Twin Cities of Minneapolis and St. Paul, Minnesota, and their surrounding region. Predominantly queer with a focus on urban and social justice issues.

<svg xmlns="http://www.w3.org/2000/svg" id="hometownlogo" x="0px" y="0px" viewBox="25 40 50 20" width="100%" height="100%"><g><path d="M55.9,53.9H35.3c-0.7,0-1.3,0.6-1.3,1.3s0.6,1.3,1.3,1.3h20.6c0.7,0,1.3-0.6,1.3-1.3S56.6,53.9,55.9,53.9z"/><path d="M55.9,58.2H35.3c-0.7,0-1.3,0.6-1.3,1.3s0.6,1.3,1.3,1.3h20.6c0.7,0,1.3-0.6,1.3-1.3S56.6,58.2,55.9,58.2z"/><path d="M55.9,62.6H35.3c-0.7,0-1.3,0.6-1.3,1.3s0.6,1.3,1.3,1.3h20.6c0.7,0,1.3-0.6,1.3-1.3S56.6,62.6,55.9,62.6z"/><path d="M64.8,53.9c-0.7,0-1.3,0.6-1.3,1.3v8.8c0,0.7,0.6,1.3,1.3,1.3s1.3-0.6,1.3-1.3v-8.8C66,54.4,65.4,53.9,64.8,53.9z"/><path d="M60.4,53.9c-0.7,0-1.3,0.6-1.3,1.3v8.8c0,0.7,0.6,1.3,1.3,1.3s1.3-0.6,1.3-1.3v-8.8C61.6,54.4,61.1,53.9,60.4,53.9z"/><path d="M63.7,48.3c1.3-0.7,2-2.5,2-5.6c0-3.6-0.9-7.8-3.3-7.8s-3.3,4.2-3.3,7.8c0,3.1,0.7,4.9,2,5.6v2.4c0,0.7,0.6,1.3,1.3,1.3 s1.3-0.6,1.3-1.3V48.3z M62.4,37.8c0.4,0.8,0.8,2.5,0.8,4.9c0,2.5-0.5,3.4-0.8,3.4s-0.8-0.9-0.8-3.4C61.7,40.3,62.1,38.6,62.4,37.8 z"/><path d="M57,42.7c0-0.1-0.1-0.1-0.1-0.2l-3.2-4.1c-0.2-0.3-0.6-0.5-1-0.5h-1.6v-1.9c0-0.7-0.6-1.3-1.3-1.3s-1.3,0.6-1.3,1.3V38 h-3.9h-1.1h-5.2c-0.4,0-0.7,0.2-1,0.5l-3.2,4.1c0,0.1-0.1,0.1-0.1,0.2c0,0-0.1,0.1-0.1,0.1C34,43,34,43.2,34,43.3v7.4 c0,0.7,0.6,1.3,1.3,1.3h5.2h7.4h8c0.7,0,1.3-0.6,1.3-1.3v-7.4c0-0.2,0-0.3-0.1-0.4C57,42.8,57,42.8,57,42.7z M41.7,49.5h-5.2v-4.9 h10.2v4.9H41.7z M48.5,42.1l-1.2-1.6h4.8l1.2,1.6H48.5z M44.1,40.5l1.2,1.6h-7.5l1.2-1.6H44.1z M49.2,44.6h5.5v4.9h-5.5V44.6z"/></g></svg>