Allowlisting by Hostname in Exchange 2013, 2016, or Microsoft 365 (formerly Office 365)

Support Desk
  • Updated
Follow

IMPORTANT NOTICE: Since Microsoft rolled out the "Secure by Default" standard in October 2021, the required method of allowlisting has changed. To correctly allowlist in Exchange and Office 365 environments, please see our article Allowlisting via Microsoft Advanced Delivery.

To ensure the effective delivery of our simulated phishing emails, you may need to allowlist our servers, we recommend allowlisting by hostname which is covered in this article.

If you need to allowlist by Email Headers instead, see the following articles:

Allowlisting by Hostname in Exchange 2013, 2016 or Microsoft 365 (formerly Office 365)

NOTE:
When allowlisting for Microsoft 365 (formerly Office 365), we STRONGLY recommend implementing the ATP bypass steps to avoid potential false-positives in your campaigns. 
  1. Log into the Microsoft 365 (formerly Office 365) portal and select Admin centers > "Exchange".
    Allowlisting_by_Hostname_-_Admin_centers_-_Exchange.png

  2. Click "Mail Flow".
    Allowlisting_by_Hostname_-_Mail_Flow.png

  3. Click "Rules".
    Allowlisting_by_Hostname_-_Rules.png

  4. Click "Add a rule".
    Allowlisting_by_Hostname_-_Add_Rule.png

  5. Click "Bypass spam filtering".
    Allowlisting_by_Hostname_-__Bypass_Spam_Filtering.png

  6. Give the rule a memorable and easy-to-understand name e.g., "Phishing Tackle spam filter bypass - Hostname".
    Allowlisting_by_Hostname_-__Bypass_Spam_Filtering_-_Name.png

  7. Under "Apply this rule if" select "The Sender" > "Domain is".
    Allowlisting_by_Hostname_-__Bypass_Spam_Filtering_-_Apply_Rule.png

  8. Click "Enter words" and enter Phishing Tackle's Hostname "mail.tacklephishing.com" (please note: the domain is a reverse of our usual domain name. See this article for details on our domain information. Then hit "Save".
    Allowlisting by Hostname - Bypass Spam Filtering - Specify Domain.png
    Note: Microsoft have updated their SCL setting, instead of -1 the rule must be set to "Bypass Spam filtering".
  9. Click "Next".
    Allowlisting_by_Hostname_-__Bypass_Spam_Filtering_-_Next_Conditions.png

  10. In "Set rule settings" scroll to the option "Match sender address in message".
    Allowlisting_by_Hostname_-__Bypass_Spam_Filtering_-_Match_Sender_Address.png

  11. Click on the drop-down menu and select "Envelope".
    Allowlisting_by_Hostname_-__Bypass_Spam_Filtering_-_Envelope.png

  12. Click "Next".
    Allowlisting_by_Hostname_-__Bypass_Spam_Filtering_-_Rule_Settings.png

  13. Review your settings and then click "Finish".
    Allowlisting_by_Hostname_-__Bypass_Spam_Filtering_-_Review.png

 

Please let us know if you require any further assistance, you can contact our support team by clicking here. Or by sending an email to support@phishingtackle.com

Related articles