Mail flow in EOP


Did you know you can try the features in Microsoft 365 Defender for Office 365 Plan 2 for free? Use the 90-day Defender for Office 365 trial at the Microsoft 365 Defender portal trials hub. Learn about who can sign up and trial terms here.

Applies to

In Microsoft 365 organizations with Exchange Online mailboxes, or standalone Exchange Online Protection (EOP) organizations without Exchange Online mailboxes, all messages sent to your organization pass through EOP before users see them. You have options about how to route messages that pass through EOP for processing before they are routed to user mailboxes.

Working with messages and message access options

EOP offers flexibility in how your messages are routed. The following topics explain steps in the mail flow process.

Use Directory Based Edge Blocking to reject messages sent to invalid recipients Describes the Directory Based Edge Blocking feature which lets you reject messages for invalid recipients at the service network perimeter.

View or edit accepted domains in EOP describes how to manage domains that are associated with your EOP service.

If you add subdomains to your organization, your EOP service can help you manage these too. Learn more about subdomains at Enable mail flow for subdomains in Exchange Online.

Configure mail flow using connectors introduces connectors and shows how you can use them to customize mail routing. Scenarios include ensuring secure communication with a partner organization and setting up a smart host.

Enhanced Filtering for Connectors describes how to configure connectors if your mail is routed to a service or device before EOP.

In hybrid environments where EOP protects on-premises Exchange mailboxes, you need to configure mail flow rules (also known as transport rules) in on-premises Exchange. These mail flow rules translate the EOP spam filtering verdict so the junk email rule in the mailbox can move the message to the Junk Email folder. For details, see Configure EOP to deliver spam to the Junk Email folder in hybrid environments. If you don't want to move messages to each user's Junk Email folder, you may choose another action by editing your anti-spam policies (also known as content filter policies). For more information, see Configure anti-spam policies.

Verify mail flow

To verify that your EOP setup, including your connector configuration, is working correctly, see the "How do you know this task worked?" section in Set up your EOP service.

Test mail flow by validating your Microsoft 365 connectors provides instructions for testing that your mail flow is set up correctly.