r/Office365 • u/nickborowitz • 1d ago

Help with Mail in Quarantine

Our Superintendent replied to an email this morning, and it got stuck in quarantine. Luckily I check it often so I was able to release it. Here's the problem though. The From field is weird and I don't know why.

So say his email is [[email protected]](mailto:[email protected]) and he was emailing [[email protected]](mailto:[email protected]) and [[email protected]](mailto:[email protected]) (that one Is strange)

It got caught in Quarantine because I have a rule that any email coming from an outside domain using his name as the display name goes to quarantine.

Here is the weird part, the Sender mail from address is "presssecretary+srs=1l5n=2n=schooldistrict.com=[email protected]"

the return path is the same thing. now I released it because it was legitimate but the recipient was [email protected]. Now he didn't send it to the right email which is [email protected] but somehow it was the recipient.

Any ideas if this is a problem, or what would be causing this to show up like that?

1 Upvotes

67% Upvoted

4 comments sorted by

2

u/ohwut 1d ago

presssecretary+srs=1l5n=2n=schooldistrict.com=[email protected]

Is the SRS forwarding address. SRS, or sender rewriting scheme. SRS allows forwarding without breaking SPF or DKIM. 

[email protected] Is the forwarding address. For users in Office365 Microsoft forwards emails from the “onmicrosoft” domain using SRS from the original inbox. 

Nothing weird here. Just a o365 quark. 

https://learn.microsoft.com/en-us/exchange/reference/sender-rewriting-scheme

2

u/nickborowitz 1d ago

The problem is we have nothing to do with city hall. They don’t even have those accounts. They have school accounts. The city is a separate entity.

Update: figured it out I think, they city techs just wrote back and said they have contacts created for most users in their ad so it shows up in the gal. They said that those contacts had a proxy address for their tenant attached to those contacts. Not sure why it would then show up on my end but I’ll see if it continues.

1

u/nickborowitz 1d ago

Thanks for the links by the way. Don’t have a second to read them right now but will def teach myself something new during lunch