Non-accepted domain report in EOL

Question

I am seeing a lot of messages in non-accepted domain report in EOL, these are all legitimate emails sent from the internet through my onprem exchange outbound connector to O365 users. There’s inbound connector on EOL (from “your org” to “O365”) where I have tried setting both options - “by verifying that the subject name on the certificate…” and “by verifying that the IP address”. So far, seems like all emails are getting received, but I worry some of them might be dropped. I have a hybird setup where my MX points to my onprem environment. So the email from the internet for O365 user goes like gmail->onprem gateway->onprem Exchange->O365.

I have checked that inbound connector in EOL has SenderDomains set to {smtp:*;1}. What else could I do? I don’t feel like setting SCL to -1 and even doubt that would have no effect.

Is setting enhanced filtering (skiplisting) to pass IP of gateway and exchange onprem the way to go?

Answer 1

Hi @Mojmir Kavan,

Thank you for posting to Microsoft Community.

Based on your description, I want to confirm if your issue is that some emails sent from the internet through your on-premises Exchange to O365 users being delivered but marked as non-accepted domain.

If so, I want to share the following with you.

Please make sure you have the proper DNS records set up for O365 to verify your on-premises.

Please double check you have configured the accepted domain in EAC correctly.

You could refer to Manage accepted domains in Exchange Online | Microsoft Learn for more information.

It could be the most likely reason, since Microsoft defined "non-accepted domains" as:

The Non-accepted domain report in the new Exchange admin center (new EAC) displays information about messages from your on-premises email organization where the sender's domain isn't configured as an accepted domain in your Microsoft 365 organization.

For more information, please refer to Non-accepted domain report in the new EAC in Exchange Online | Microsoft Learn.

Also, are these subdomain email addresses?  You have to add these in as additional domains in most cases. Please remember also have to add in .com, .net, .info…separately.

Hope it helps and if there are anything else I could help with, please let me know.