When are Tenant Block/Allow List and Journaling applied in Exchange Mail Flow

asked 2023-01-12T14:31:54.6633333+00:00
Jason Atkins 0 Reputation points
I am trying to understand whereabouts the following Exchange actions would be performed

* Tenant Allow/Block list exceptions applied to a message?
  * I think it happens after Anti-Malware but before Mail-Flow Rules based on my testing
* A message be journaled if using a legacy journal rule?
  * Is it within the EOP steps, or afterwards?

based on the stages displayed in the diagram on this page:

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/eop-about?view=o365-worldwide#how-eop-works

I've read endless MS articles but cannot find a clear answer.
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
6,072 questions
No comments
{count} votes

1 answer

Sort by: Most helpful
  1. answered 2023-01-13T06:37:59.3966667+00:00
    Kael Yao-MSFT 21,506 Reputation points Microsoft Employee

    Hi,

    • Tenant Allow/Block list exceptions applied to a message?
    • I think it happens after Anti-Malware but before Mail-Flow Rules based on my testing

    May I ask how did you test it? What are the settings in Tenant Allow/Block list and mail flow rules?

    • A message be journaled if using a legacy journal rule?
    • Is it within the EOP steps, or afterwards?

    It should work after the EOP process.

    If you are blocking the sender in Tenant Allow/Block list, journaling email would not be sent.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.