Mail Flow - External Message Warning HELP

posternutbag,

Thank you.

Not sure if this will work for us then. We have a couple hundred employees and it seems like more and more of them get spoofed messages from themselves.

Hi,

I did the same thing and it works fine when an email comes from Outside the Organization. We have recently migrated from On premise Exchange Server to Office 365 and need to implement this.

In our case, the new incoming email of migrated users from on-prem is automatically forwarded to O365, this is to catch still the emails going to old exchange server. But when the user A (O365 User) emailed the user B (O365 User) on his on-prem email then forwarded to user B's O365 email, the Mail Flow Rule doesn't recognize the condition.

Hope you guys can help me. Thanks

Hi BH33,

Thanks for provide the details in your post. About your question, please kindly check following steps to see if it can help you fix this issue:

1. In Exchange Admin Center, go to mail flow > rules and then click "+" to create a new rule.
2. Then set the new rule like below picture:

Note: in step 4, please enter following code: 

<p><div style="background-color:#FFEB9C; width:100%; border-style: solid; border-color:#9C6500; border-width:1pt; padding:2pt; font-size:10pt; line-height:12pt; font-family:'Calibri'; color:Black; text-align: left;"><span style="color:#9C6500"; font-weight:bold;>CAUTION:</span> This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.</div><br></p>

I have tested above rule on my side and I can successfully show the warning message(see below picture), if you have any problems when doing so, please feel free to post back and provide us a screenshoot of the detailed information about the rule you created for analysis.

Regards,

Jennifer

I joined in amazon company as an employee as they are sending mails because for my verification. In that mail bottom of the mail I'm getting like" This email is originated from outside of the organization. Do not click or open attachments." Is this dangerous or company kept their security policies so that hackers cannot hack any data of their organization?? Please help me out with this question..!!!

Hi Jen,

Thank you for your response.

As indicated on my last post, we are able to implement this also. Everything is working fine, but we do have one issue that we can't resolve. We have an existing on-premise microsoft exchange server, User A have an account on on-premise and on 365. Here is the setup:

1. User A and User B have an account both on on-premise exchange server and exchange online
2. On-premise exchange server domain: domain.com
3. Exchange Online domain: domainph.com
4. Created the rule on exchange online, and add in the exemption the domain "domain.com"
5. Created a rule on on-premise exchange server of forwarding emails from User_@domain.com to User_@domainph.com
6. When User_@domainph.com emailed User_@domain.com, email should be forwarded to User_******@domainph.com
7. User_@domainph.com received the email of User_@domainph.com (email forwarded from User_******@domain.com), however User_A@domainph also received warning indicating the rule created from Exchange Online, meaning bullet no. 4 from above is not working.