Exchange Online
A Microsoft email and calendaring hosted service.
6,202 questions
Azure Communications and Email Services Spam Filtering
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 20%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMS%3C/text%3E%3C/svg%3E)
Matthew Sykes
116
Reputation points
I have been playing around with the Azure Email Services as it seems like a good solution (once out of preview) for automated emailing from Function Apps.
Everything seems to be setup correctly,
- I have a verified custom domain
- All DNS entries are setup for SPF/DKIM
- Sender name and address configured
- I have connected the domain to a Communications Service
Manually sending an email through a test app (WPF and Azure SDK with connection string) works fine and the email arrives/is signed
As soon as I automate the process and use a queue triggered function to send the email, I hit issues. The email sends fine but Exchanges default policies quarantine the message as spam under the phishing category.
Has anyone else encountered this? I am not really sure how to proceed really as the email is being signed and verified.
Exchange Online
Azure Communication Services
Azure Communication Services
An Azure communication platform for deploying applications across devices and platforms.
1,258 questions
{count} vote
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(9.6, 31%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJX%3C/text%3E%3C/svg%3E)
Jame Xu-MSFT 4,191 Reputation points2022-11-09T06:18:06.287+00:00 Hi @Matthew Sykes ,
Are you sending email to your own Exchange server or someone else's Exchange server? We focus on Exchange and Outlook, we do not know much about three-party applications, and it may be that the automation process is judged as spam. You could analyze the email headers to see why the email was identified as spam:
https://mha.azurewebsites.net/ -
Matthew Sykes 116 Reputation points
2022-11-09T08:54:40.413+00:00 Hi, I am sending to our own Exchange Online server at this point.
Having run the headers through the tool you provided (nice tool btw) it looks to be classing it as spoofing. The other headers also show spf and dmarc as 'pass' and dkim as 'verified'.
Anti Spam Report
Country/Region US
Language en
Spam Confidence Level 5
Spam Filtering Verdict SPM
IP Filter Verdict NLI
HELO/EHLO String NAM12-DM6-obe.outbound.protection.outlook.com
PTR Record mail-dm6nam12acsn2247.outbound.protection.outlook.com
Connecting IP Address 40.92.22.247
Protection Policy Category SPOOF
Spam rules (13230022)(451199015)(1690799008)(9316004)(19627405001)(7636003)(6636002)(36736006)(6916009)(86362001)(558084003)(166002)(3480700007)(336012)(6486002)(9686003)(7846003)(61793004)(8636004)(26005)(6496006)(956004)(5660300002)(1096003)(8676002)(15398625002)(43620500001)
Source header CIP:40.92.22.247;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:NAM12-DM6-obe.outbound.protection.outlook.com;PTR:mail-dm6nam12acsn2247.outbound.protection.outlook.com;CAT:SPOOF;SFS:(13230022)(451199015)(1690799008)(9316004)(19627405001)(7636003)(6636002)(36736006)(6916009)(86362001)(558084003)(166002)(3480700007)(336012)(6486002)(9686003)(7846003)(61793004)(8636004)(26005)(6496006)(956004)(5660300002)(1096003)(8676002)(15398625002)(43620500001);DIR:INB;
Unknown fields DIR:INB; -
Jame Xu-MSFT 4,191 Reputation points
2022-11-10T09:22:22.47+00:00 Hi @Matthew Sykes ,
According to the error message you provided, you can take a look at Spoof intelligence insight in EOP to see if any of the reasons were determined to be spam.
There are two ways to view the reasons for being judged as SPOOF:- By viewing the Spoof detections report:
https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/view-email-security-reports?view=o365-worldwide#spoof-detections-report - By viewing the message trace
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
- By viewing the Spoof detections report:
-
Jame Xu-MSFT 4,191 Reputation points
2022-11-14T08:21:12.857+00:00 Hi, I'm here to confirm with you if your issue has been resolved. If the problem is successfully solved, you can share your solution and mark them or the helpful reply as answer, this will make answer searching in the forum easier and be beneficial to other community members as well.
-
Matthew Sykes 116 Reputation points
2022-11-14T09:01:24.83+00:00 This does not really solve the issue, it just provides places to see that the message was blocked.
My issue here is that a service provided by Microsoft in Azure, that is fully configured, is being classed as spam by Microsoft in Exchange. What use is an automated/bulk emailing service if the very same company then blocks the outputs by default?
The emails do pass SPF, DKIM, or DMARC checks, so I can only assume the source IP is the cause for the block, which I have no idea how to rectify given that, again, its a Microsoft service.
-
Jame Xu-MSFT 4,191 Reputation points
2022-11-17T01:56:32.127+00:00 Hi @Matthew Sykes ,
Your issue is related to Azure, you need to get the service request in the following figure to let the backend engineer see the reason why the Azure side is blocked.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 57.99999999999999%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMH%3C/text%3E%3C/svg%3E)
Morris Hellwig 5 Reputation points2023-07-20T12:43:10.7333333+00:00 Hi Matthew,
did you find a solution? We are facing the same issue. :(
-
Matthew Sykes 116 Reputation points
2023-07-20T14:22:42.6933333+00:00 @Morris Hellwig I logged a support ticket as suggested by Mircosoft, they did contact me fix the issue from their side. They never shared info on what the problem or fix was however...
Sign in to comment
Sign in to answer