u/Informal_Thought

Hi all,

We are basically experiencing the exact situation described here: https://www.reddit.com/r/Office365/comments/167jrks/sender_rewriting_scheme_issue/

We have a requirement for any emails coming in to an address on our M365 tenant are automatically forward to an external address. When we do this using our Proofpoint outbound connector, we see NDRs from our Proofpoint along the lines of this:

email@internaladdress.com
mxxx-xxxxx.pphosted.com
Remote server returned '554 5.7.0 <mxxx-xxxxx.pphosted.com #5.7.367 smtp;550 5.7.367 Remote server returned not permitted to relay -> 550 5.7.1 Relaying denied>'

One suggestion I've seen is that we should look at enabling enhanced filtering on our Proofpoint inbound connector, but I'm not sure that this is even compatible with how Proofpoint works
https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/enhanced-filtering-for-connectors

Has anyone experienced this before and come up with a solution? I'm not very encouraged by the other reddit post I linked from 3 years ago- doesn't sound like anyone really got to the bottom of it there.

Hi all,

For those managing a larger, multi-site S1 deployment, can you share how you manage policy overrides?

From my understanding (maybe I am wrong? happy to stand corrected) each endpoint can only have one override policy applied. If there are multiple overrides needed, these must be added to the single policy json.

I am trying to work out the best way to structure overrides when I have:

-Some overrides that we want to apply to every signal endpoint across all sites
-Some overrides that we want to apply to every endpoint, but only for a given site
-Some overrides that we want to apply to only a particular subset of endpoints, at certain sites

Thanks