EOP Field Notes

Exchange Online Protection: Notes from the field
Andrew Stobart

Options
Search Blogs
Tags
Archive
Archives

EOP Field Notes

TechNet Blogs » EOP Field Notes
Sort by: Most Recent | Most Views | Most Comments
Excerpt View | Full Post View

  • Recipient Notifications

    Posted 13 days ago
    by Andrew Stobart}
    The ability to send a notification to the recipient when a transport rule triggers. This is a request that we have received from a lot of customers, and I’m happy to let you know that it is now rolling out in the form of an action in EOP transport...

  • IP Ranges Added to EOP

    Posted 27 days ago
    by Andrew Stobart}
    On TechNet we publish the range of IP addresses that are used when sending mail out of a custom EOP connector. If you have created an EOP on-premises connector to deliver inbound mail to your on-premises mail environment, or an EOP partner connector to...

  • An Ode to EOP

    Posted 1 month ago
    by Andrew Stobart}
    This is typically a slow week for people, so what better time than to post something fun about Exchange Online Protection! Back in May I presented a session on EOP at TechEd North America 2014 which took place in Houston. To be a little different,...

  • Top Ten Posts of 2014

    Posted 1 month ago
    by Andrew Stobart}
    I only began this blog in June of this year and so it’s hard to believe that it is already six months old! Looking back over the past six months I have had a blast writing and sharing articles with the community and have received a lot of positive...

  • Message Trace, the PowerShell Way

    Posted 1 month ago
    by Andrew Stobart}
    From my experience, a very small number of people actually choose PowerShell over the GUI (Graphical User Interface, ie. The Office 365 Portal). But once you get a grasp of PowerShell and write some scripts, you’ll see the light and going back to...

  • Exchange Server December Updates

    Posted 1 month ago
    by Andrew Stobart}
    Update, Dec 11/14: Exchange Server 2010 SP3 Update Rollup 8 has been temporarily pulled due to a problem. Update, Dec 15/14: Exchange Server 2010 SP3 Update Rollup 8 v2 has been posted While I mainly target Exchange Online Protection with this blog...

  • Remote Desktop Connection Manager updated to v2.7

    Posted 2 months ago
    by Andrew Stobart}
    Remote Desktop Connection Manager, or RDC Man, is a wonderful piece of software that I’ve been using for the past eight years. RDC Man is one of those applications, like Outlook, that I open almost every single day and although not directly applicable...

  • An Early Gift, EOP Bulk Mail Detection - The Easy Way

    Posted 2 months ago
    by Andrew Stobart}
    This past summer we added new bulk detection capabilities to Exchange Online Protection. At the time, if you wanted to take advantage of these new capabilities you had to add an EOP transport rule to detect the BCL (bulk complain level) that EOP stamped...

  • Easily tell which transport rules a message triggered

    Posted 2 months ago
    by Andrew Stobart}
    Hello fellow traveller, come sit with me by the fire, there is plenty of room. You look to be weak from your travels, I have plenty of rations that I will gladly share with you. I have many stories from my own travels that I would love to share. Wait…...

  • Transport Rule Limit Increase

    Posted 3 months ago
    by Andrew Stobart}
    In the past the maximum number of transport rules that you could create in Exchange Online ( Enterprise , Education , and Government plans) was 100. This limit has recently been increased to 300 (for Enterprise , Education , and Government plans)! For...

  • Best Practices for Finding Executable Content

    Posted 3 months ago
    by Andrew Stobart}
    This article may be common knowledge for some, but it is important to revisit and refresh outselves on. You may be aware of what content EOP will flag as being executable, or you may not. In either case, I think this is an important topic so sit back...

  • P2 Headers Now Respected for End User Safe and Blocked Senders Lists

    Posted 4 months ago
    by Andrew Stobart}
    Exchange Online Protection will now evaluate both the P1 and P2 headers in a message against an end users safe and blocked senders list. I know, I’m super excited too! Previously only the P1 header of a message was compared to these lists. Not only...

  • Daisy Chaining with EOP

    Posted 4 months ago
    by Andrew Stobart}
    Update Dec 23, 2014 – I’ve revised this article to make a couple of points clearer. On the mail flow side there are no issues with daisy chaining. However, if the intent is to evaluate the effectiveness of EOP filtering, having a service sit...

  • Inbound Connector Configuration You’ll Want to Avoid

    Posted 4 months ago
    by Andrew Stobart}
    I recently worked with a customer who had a configuration in their EOP outbound connector that broke inbound mail for a newly added domain. I want to share this tale in hopes that you not only learn more about EOP partner connectors, but that you decrease...

  • Behavior Change When Setting the SCL with a Transport Rule

    Posted 5 months ago
    by Andrew Stobart}
    With my coffee currently in one hand, it would be very useful if I could type with only my other hand. Alas I cannot, so I’ll be typing this article with both hands while my coffee waits for me. With none of this at all being relevant to this blog...

  • Special Case, Set SCL to 0

    Posted 5 months ago
    by Andrew Stobart}
    Update (August 28, 2014) - Setting the SCL with a transport rule to anything from 0 to 4 will cause the behavior that is described in this article. This is a scenario I’ve wanted to write about for some time now as it isn’t very intuitive...

  • Importing Safe and Block Lists with PowerShell

    Posted 5 months ago
    by Andrew Stobart}
    I just dropped my van off for some maintenance at the dealership and am currently waiting for a shuttle to take me to the office. As I sit here I’m thinking about EOP and PowerShell and have come up with a great idea for this week’s article...

  • One MX to Rule Them All

    Posted 5 months ago
    by Andrew Stobart}
    Before I start I would like to call out that I think this is the best blog title that I have come up with to date. Surprisingly, or maybe not, I thought of this title and article while I was playing Ultimate Frisbee. My mind was obviously not in the game...

  • Is X-Microsoft-Antispam a New EOP Header

    Posted 6 months ago
    by Andrew Stobart}
    Yes, yes it is, and I’m glad you noticed! X-Microsoft-Antispam is quite new and only started showing up in messages passing through EOP a few months ago. This new header currently contains two published values to help with bulk mail and phishing...

  • Quarantine and PowerShell

    Posted 6 months ago
    by Andrew Stobart}
    The EOP online quarantine is a wonderful feature that can be easily managed through the Office 365 Portal. However, if you are looking for more functionality and flexibility with quarantine management, you’ll need to turn to PowerShell. Before...

  • Verifying ESN Delivery

    Posted 6 months ago
    by Andrew Stobart}
    So, you have decided to use the Exchange Online Protection (EOP) quarantine and have enabled End user Spam Notifications (ESN). Great choice! Now, after a couple of days have passed, you are wondering if everything is working as it should. How can you...

  • Advanced Spam Filtering and X-CustomSpam

    Posted 6 months ago
    by Andrew Stobart}
    When a legitimate message is marked as spam, the first question usually asked is “why?” It can sometimes, but not always, be quite difficult to find the explanation. If an enabled Advanced Spam Filter (ASF) option has caused the spam detection...

  • On-Premises Delivery Failover

    Posted 7 months ago
    by Andrew Stobart}
    Organizations with on-premises mail environments often will have a primary site and at least one backup site. When Exchange Online Protection is being used to protect those on-premises mail environments, the ideal configuration would have EOP only delivering...

  • The Resolver

    Posted 7 months ago
    by Andrew Stobart}
    While “The Resolver” would be a great nickname for a councillor, that’s not quite what we are talking about here. When processing inbound messages, Exchange Online (not EOP Stand Alone) will always resolve the recipient to the primary...

  • Office 365 for Business Public Road Map & First Release Program

    Posted 7 months ago
    by Andrew Stobart}
    Yesterday we released details on two very exciting items, the Office 365 for business public roadmap and the First Release Program . On a personal side, I am very excited about both of these items because first, I’m a big advocate of transparency...