I want to set up a mail flow rule which detects any email from outside the organization where To: and CC: don't specify an internal recipient (this would include emails which are bcc'd to internal users where the non-bcc'd recipients are exclusively outside the organization). Am I missing something?
This is meant as a mechanism for spam control.
I'm not really seeing any way to specify this in the mail flow rules though it could be done pretty easily with normal mailbox rules. Is there a way to do this at the organization level?
This is on Exchange Server from Office 365.
For transport rule, if we want to filter emails which are Bcc to an internal mailbox(Even if
To
field has an external email address), we could create a rule like the following:After sending emails To/Cc/Bcc from an external email address to an office 365 mailbox, the emails will apply the transport rule when they are sent To/Cc:
If you want to block these Bcc emails, you could add the condition(The To or Cc box contains a member of (Distribution or Dynamic Distribution Group which includes your internal mailboxes)) to an exception, and Do the following ... (Reject/Delete emails), the following rule is for your reference: