https://tools.ietf.org/html/rfc5322#section-3.6.2 Originator Fields The originator fields of a message consist of the from field, the sender field (when applicable), and optionally the reply-to field. The from field consists of the field name "From" and a comma- separated list of one or more mailbox specifications. If the from field contains more than one mailbox specification in the mailbox- list, then the sender field, containing the field name "Sender" and a single mailbox specification, MUST appear in the message. In either case, an optional reply-to field MAY also be included, which contains the field name "Reply-To" and a comma-separated list of one or more addresses. from = "From:" mailbox-list CRLF sender = "Sender:" mailbox CRLF reply-to = "Reply-To:" address-list CRLF The originator fields indicate the mailbox(es) of the source of the message. The "From:" field specifies the author(s) of the message, that is, the mailbox(es) of the person(s) or system(s) responsible for the writing of the message. The "Sender:" field specifies the mailbox of the agent responsible for the actual transmission of the message. For example, if a secretary were to send a message for another person, the mailbox of the secretary would appear in the "Sender:" field and the mailbox of the actual author would appear in the "From:" field. If the originator of the message can be indicated by a single mailbox and the author and transmitter are identical, the "Sender:" field SHOULD NOT be used. Otherwise, both fields SHOULD appear. Note: The transmitter information is always present. The absence of the "Sender:" field is sometimes mistakenly taken to mean that the agent responsible for transmission of the message has not been specified. This absence merely means that the transmitter is identical to the author and is therefore not redundantly placed into the "Sender:" field. The originator fields also provide the information required when replying to a message. When the "Reply-To:" field is present, it indicates the address(es) to which the author of the message suggests that replies be sent. In the absence of the "Reply-To:" field, replies SHOULD by default be sent to the mailbox(es) specified in the "From:" field unless otherwise specified by the person composing the reply. In all cases, the "From:" field SHOULD NOT contain any mailbox that does not belong to the author(s) of the message. See also section 3.6.3 for more information on forming the destination addresses for a reply.

@dbeato said in Office 365 Moving Emails to Deleted Items: @dafyre said in Office 365 Moving Emails to Deleted Items: @dbeato said in Office 365 Moving Emails to Deleted Items: @dafyre said in Office 365 Moving Emails to Deleted Items: e got a strange one... I have a user here whose Emails go from whatever folder they are in to the Deleted Items folder after being read... Sometimes. Sometimes it doesn't happen for several minutes, and other times it happens right away. The user hasn't been phished that we can tell. No bogus rules in Outlook forwarding things to the deleted items. Check both Web and Outlook 2016. What am I not looking at that could be causing this? They got hacked though https://blogs.technet.microsoft.com/office365security/how-to-fix-a-compromised-hacked-microsoft-office-365-account/ https://docs.microsoft.com/en-us/office365/securitycompliance/responding-to-a-compromised-email-account Sometimes the rule is a dot on the name.... I am assuming it's a hacked account, but we changed the password to a new one. I disconnected all of her sessions from Office 365. Still happening. I see no rules with a dot in the name... or spaces or foreign characters. I see exactly the number of rules on my CLI as I do in Outlook and OWA. Can you clear them all ? Take a screenshot of the settings and then remove them and see what changes. The rules run autonomously and is not someone running them. That's what we've done now. All of the rules are disabled. End-user is turning them back on one at a time now.

@JaredBusch said in Resolved - Postfix on Fedora 29 - Why Can't I Send Mail?: @wrx7m said in Resolved - Postfix on Fedora 29 - Why Can't I Send Mail?: It applied to the instance (multiple servers) FFS no. That is not what anything is. It applied to the Account. Which contains multiple instances. Instances that could be servers or desktops or WTF ever. My apologies. I meant to put account.

@LilAng said in Copy / Paste from Excel on Mac to Outlook Web Access Creates Image Rather than Table: In Excel, use File > Save as web page, then attach the web page to your email message? Yeah, we found that process. That's a pretty huge "fail" process.

I have a script that I wrote to do this. https://gitlab.com/dafyre/powershell-utils/raw/master/export-O365Group.ps1 It gets you the person's DisplayName and their email address. If you're exporting a Distribution List, just add the -distributionlist switch. If you're exporting an Office 365 Group (Unified Group), then leave that switch out. Other parameters should be self explanatory.

@Pete-S said in “Catastrophic” hack on email provider destroys almost two decades of data: So if you make a backup to something like Backblaze. Would that be considered an offline backup? Depends how it is done. It's online, not offline. But it can be airgapped.

@scottalanmiller said in Zimbra Services Fail to Start; Removing Stale PIDs: @dbeato said in Zimbra Services Fail to Start; Removing Stale PIDs: @dbeato said in Zimbra Services Fail to Start; Removing Stale PIDs: @scottalanmiller said in Zimbra Services Fail to Start; Removing Stale PIDs: @dbeato said in Zimbra Services Fail to Start; Removing Stale PIDs: I have only had this happened on the upgrades between versions and OS upgrade. This happened to us while simply up and running. Middle of the day. Very odd. Weird What version? 8.8.10_GA_3716 Hmmm I just upgraded from 8.8.9 to 8.8.11 last week or two weeks ago.

@anthonyh said in Zimbra, fail2ban, CentOS 7, and firewalld: @scottalanmiller said in Zimbra, fail2ban, CentOS 7, and firewalld: https://arstech.net/zimbra-fail2ban-setup/ I came across that article and it's the most promising. Though it's still a iptables based fail2ban configuration. I'm not sure if it's as simple as changing the references to iptables or if tweaking it to work with firewalld is more involved. I suppose an option is to disable firewalld and install iptables. I've done that before in the past. Hmm... That's probably what they did, because you need to disable firewalld to enable iptables.

I used to use a barracuda 300 (for about 6 years) in conjunction with their cloud filtering for our on-prem Exchange 2010 server. I think there were 2 times that they had some sort of issue where they let a crap-ton of spam through, unfiltered. I have moved to Office 365 and am exclusively using their filtering. I think barracuda was better at filtering. Especially, when it comes to phishing messages that pretend to be from Microsoft's services. You'd think that Microsoft would be able to catch those better than anyone. Not in my experience.

@JasGot said in Exchange connectors: I need some help sorting out the exchange connectors on a server. We were called in to figure out a spam problem. It's not severe and during our exam, we are trying to check the configuration of Exchange and get mail test tools to be happy. Right now we are getting: Reverse DNS does not match SMTP Banner from mxtoolbox. This is a simple MS Exchange setup; One Exchange server on a domain, people connecting with MS outlook from inside the building on the domain and from outside the building using Ms Outlook, and two copiers that can send e-mail. The issue is all the receive connectors. It's not clear to me which one mxtoolbox is seeing. They are: Client Frontend EXCHANGE Client Proxy EXCHANGE Default EXCHANGE Default Frontend EXCHANGE Outbound Proxy Frontend EXCHANGE Scan2EMail I'd like to know what each one represents. ie; I presume Frontend mean Internet facing, but I'm not sure. Also, do internal MS Outlook users connect to a receive or send connector? (or both?) Thanks. You should change the ELHO name on all of them so it matches your external URL (Which in turn needs to match your Reverse DNS name). The Outlook clients connect to the Exchange server and Exchange sends the emails they do not connect to the connectors.

@huzefa22 said in Same subdomain name internal and external i have an issue with the DNS, specifically emails: @Dashrender when i ping mail.abc.xyz.com i don't get a reply, the SOA is the primary and the secondary domain on the local domain. i don't know if this is what you were asking. Regards, Huzefa Never test DNS with ping. Test with nslookup. Whether you can ping or not is a factor of many things, DNS just one of them and only sometimes. nslookup tests DNS and nothing else.

He only sent me a few hundred thousand, I feel ripped off.

Good to know, I use Ubuntu/Debian so I will check for that.

@travisdh1 said in SPAM Filtering with Zimbra: @dbeato I'm a fan of using their RBL list. Anyone know if that's still available for free? @travisdh1 also the server is b.barracudacentral.org

@dbeato said in Exchange / Office 365 Auto Response from Public Folder: @scottalanmiller said in Exchange / Office 365 Auto Response from Public Folder: @travisdh1 said in Exchange / Office 365 Auto Response from Public Folder: @scottalanmiller said in Exchange / Office 365 Auto Response from Public Folder: We have a public folder on Office 365 that is email enabled, the customer would like an auto-response from the public folder. I'm not sure if that is even possible. Wouldn't that be an auto-response setup from one of the accounts that receives those emails? Does that work with a public folder? Yes, with Folder Assistant through Outlook. Otherwise you can create a rule for incoming emails through Office 365 to accomplish that too. Yeah, seems... poor. Found this for doing it through Outlook, which would be unreliable and clearly not useful. https://www.codetwo.com/admins-blog/setting-public-folder-auto-reply/

@mrwright4hire said in Mail stuck in Office 365, Enterprise Exchange queue!: @dbeato said in Mail stuck in Office 365, Enterprise Exchange queue!: @mrwright4hire said in Mail stuck in Office 365, Enterprise Exchange queue!: A few users are having issues sending out emails. Not everytime, but intermittent. Has anyone experienced this type of issue before? I can use all the help I can get. I would like to know how to release the emails and avoid emails getting stuck again. In advanced, thank you for your efforts. Have any of your users been not able to send at all? I am not seeing that right now. Great question dbeato! Here's the thing, I myself tried to email the same address while monitoring it from Barracuda. Nothing showed up as going out. It's strange cause we received email from the address. So it is on the received end of Barracuda?

@pete-s said in Web hosting + (or not) email: keep separate: This is somewhat ridiculous. The entire premise of Microsoft's offering is vendor lock-in. Of course you are hostage to Microsoft. Of course they will keep integrating their services until it's impossible for you to change providers. And when they raise their prices you will pay. It doesn't make sense to fool yourself into thinking something else. If you want separate discrete services you have to stop using O365 because it's already a bundle of services - even without email. Unless you only want email from them, then it's not too locked in. Just not very good.

@dustinb3403 said in How Do You Stop Office 365 Low Severity Alert Emails: As a general thought on this, automatic mail forwarding could be a compliance issue, so make sure to keep this in mind before you go turning off alerts that might be a compliance issue later on. . . Automatic mail forwarding is a "every few hours" task. So these alerts are a ridiculous amount of crying wolf. It's created a "zero belief" system in MS alerts. At this point, there are no alerts, just spam, is how it is seen.

@matteo-nunziati said in Outlook 2016 Export to PST Missing a Lot of Data: @scottalanmiller said in Outlook 2016 Export to PST Missing a Lot of Data: @obsolesce said in Outlook 2016 Export to PST Missing a Lot of Data: You can right-click on the mailbox, or a folder, and in properties, you can see how much data is there versus on the Exchange server. Most is there, for sure. But definitely not "all". Confirm. I got always this end result. This is just best effort. Not complete at all. That's just crappy, especially as Microsoft themselves recommend it.

You can use Powershell as well Set-MailboxAutoReplyConfiguration -Identity username -AutoReplyState disabled

@jaredbusch said in Does Office 365 Support Plus Notation in Email (+): @scottalanmiller said in Does Office 365 Support Plus Notation in Email (+): @kelly said in Does Office 365 Support Plus Notation in Email (+): The period notation is really annoying for me. I signed up [email protected] when it was in beta and this "feature" wasn't publicized. Years later someone else was able to register [email protected] and now I get DoTerra order details and the like. I have no idea what I don't get at this point. Don't know about a period notation feature. What does that do? And how do that not break email globally? The same way that + doesn't break it. It is outside of the RFC altogether. So as long as wtf ever service you sign up for lets you type it, then you can do it. As for what it does. Well [email protected] is a common thing. But someone that signs up to gmail with [email protected] can also receive email from email sent to [email protected] or even [email protected] Google simply ignore all periods on the left of the @ for gmail based email addresses. Gmail only, not GSuite. Wow, that's.... weird. I guess it works until they do something like the story above and screw it up.

@obsolesce said in Standard Email Signatures in Office 365 with Embedded Images: @pete-s you need to fix that... Done.

@scottalanmiller said in Zimbra SMTP Relay through MailGun by Rackspace: This is because you need to be using Zimbra's own version of the tools, not the OS ones.

Yup, basically just automating Postfix configs.

This would work on prem exchange. Probably works with a tweak for o365. Get-mailbox | get-inboxrule | remove-inboxrule

@dustinb3403 said in Getting PowerShell to provide me the EventLog details in an email: Yup. . . I'm an idiot lol. I set it to only look back 1 day and email me those results within the past day. This obviously would show blank results, since there are no 2013 events within the past day! Ha ha ha. Whoops!

I have seen this before and it is usually with IE or Edge and can login on Chrome or Mozilla Firefox. I also try to clear all the user sessions via powershell.

@dbeato said in AquaMail for ChromeBooks: @scottalanmiller said in AquaMail for ChromeBooks: @dbeato said in AquaMail for ChromeBooks: You can try Inbox (Only for Gmail though) https://inbox.google.com That's specifically what I'm avoiding because it isn't very good. AquaMail definitely blows that away. Great, I am trying it. It's not amazing, but it is designed natively as an IMAP client, which gives it an edge. It's not an add on feature.