It's possible that the system that marks the e-mail with the X-Forefront-Antispam-Report: ...;SFV:SPM;... also sends it to the less-reputable-ip-address pool to be sent out, so one would think that basing a filter off of X-Forefront-Antispam-Report *should* be enough.

https://www.mail-archive.com/mailop@mailop.org/msg05498.html

Sorry for butting in, long time lurker that had a bit of time to catch up.

Cheers,

On 11/11/24 14:50, Robert Giles via mailop wrote:
Interesting;  is there a straightforward way to drop that traffic entirely?

I think the HRDP IPs and hostnames are probably indistinguishable for folks outside of the Microsoft ecosystem, and "OutboundIpPoolName=HighRiskOutboundPool" is some tenant-viewable internal marker that's not actually embedded in the transmitted message.

Robert


On 11/11/2024 at 06:15, Scott Q. via mailop wrote:
But it's not really the same. Not all providers offer free accounts which clearly attracts abusers a lot more than paid accounts. Furthermore, not all providers do this:

"Segregation of outbound email traffic: Every outbound message that's sent through the service is scanned for spam. If the message is determined to be spam, it's delivered from a secondary, less reputable IP address pool named the high-risk delivery pool. For more information, see..."

"https://learn.microsoft.com/en-us/defender-office-365/outbound-spam- protection-about <https://learn.microsoft.com/en-us/defender- office-365/outbound-spam-protection-about>"
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to