Public/Exchange/Protection/Examples/Bypass-SpamFiltering-TrustedSender.json

{
    "Name": "Bypass spam filtering for trusted sender contoso.com",
    "Comments": "Skip spam filtering for messages from contoso.com that pass DMARC (dmarc=pass or dmarc=bestguesspass). Adds an X-ETR header for traceability. Replace contoso.com with the actual partner domain. Never use accepted domains or popular consumer domains here, this widens the attack surface.",
    "Mode": "Enforce",
    "Enabled": true,
    "FromScope": "NotInOrganization",
    "SenderDomainIs": ["contoso.com"],
    "HeaderContainsMessageHeader": "Authentication-Results",
    "HeaderContainsWords": ["dmarc=pass", "dmarc=bestguesspass"],
    "SetSCL": -1,
    "SetHeaderName": "X-ETR",
    "SetHeaderValue": "Bypass spam filtering for authenticated sender 'contoso.com'",
    "StopRuleProcessing": true
}