2
Sender from office 365 detected as null sender when my user is in a email group in office 365.
Problem reported by Char Lee Yeong - 10/31/2022 at 12:16 AM
Submitted
Hi,

Need help here. I have a problem with 1 of the sender from office 365. If he send directly to our user, there is no issue. However, if he send to a group created in office 365, the sender will be <>. Please help.

[2022.10.28] 14:58:05.942 [40.107.223.62][41688215] rsp: 220 mail.infinity.com.my
[2022.10.28] 14:58:05.942 [40.107.223.62][41688215] connected at 28/10/2022 2:58:05 PM
[2022.10.28] 14:58:05.942 [40.107.223.62][41688215] Country code: US
[2022.10.28] 14:58:06.145 [40.107.223.62][41688215] cmd: EHLO NAM11-DM6-obe.outbound.protection.outlook.com
[2022.10.28] 14:58:06.161 [40.107.223.62][41688215] rsp: 250-mail.infinity.com.my Hello [40.107.223.62]250-SIZE 699050666250-AUTH LOGIN CRAM-MD5250-STARTTLS250-8BITMIME250-DSN250 OK
[2022.10.28] 14:58:06.364 [40.107.223.62][41688215] cmd: STARTTLS
[2022.10.28] 14:58:06.364 [40.107.223.62][41688215] rsp: 220 Start TLS negotiation
[2022.10.28] 14:58:06.989 [40.107.223.62][41688215] cmd: EHLO NAM11-DM6-obe.outbound.protection.outlook.com
[2022.10.28] 14:58:07.004 [40.107.223.62][41688215] rsp: 250-mail.infinity.com.my Hello [40.107.223.62]250-SIZE 699050666250-AUTH LOGIN CRAM-MD5250-8BITMIME250-DSN250 OK
[2022.10.28] 14:58:07.348 [40.107.223.62][41688215] cmd: MAIL FROM:<ong.kahhock@medlogsea.com> SIZE=827668
[2022.10.28] 14:58:07.348 [40.107.223.62][41688215] senderEmail(1): ong.kahhock@medlogsea.com parsed using: <ong.kahhock@medlogsea.com>
[2022.10.28] 14:58:12.598 [40.107.223.62][41688215] rsp: 250 OK <ong.kahhock@medlogsea.com> Sender ok
[2022.10.28] 14:58:12.598 [40.107.223.62][41688215] Sender accepted. Weight: 0. Block threshold: 30. 
[2022.10.28] 14:58:12.942 [40.107.223.62][41688215] cmd: RCPT TO:<clyeong@infinity.com.my>
[2022.10.28] 14:58:12.942 [40.107.223.62][41688215] rsp: 250 OK <clyeong@infinity.com.my> Recipient ok
[2022.10.28] 14:58:13.301 [40.107.223.62][41688215] cmd: DATA
[2022.10.28] 14:58:13.301 [40.107.223.62][41688215] Performing PTR host name lookup for 40.107.223.62
[2022.10.28] 14:58:13.301 [40.107.223.62][41688215] PTR host name for 40.107.223.62 resolved as mail-dm6nam11on2062.outbound.protection.outlook.com
[2022.10.28] 14:58:13.301 [40.107.223.62][41688215] rsp: 354 Start mail input; end with <CRLF>.<CRLF>
[2022.10.28] 14:58:13.645 [40.107.223.62][41688215] senderEmail(2): ong.kahhock@medlogsea.com parsed using: <ong.kahhock@medlogsea.com>
[2022.10.28] 14:58:13.661 [40.107.223.62][41688215] Sender accepted. Weight: 0. Block threshold: 30. 
[2022.10.28] 14:58:15.092 [40.107.223.62][41688215] rsp: 250 OK
[2022.10.28] 14:58:15.108 [40.107.223.62][41688215] Received message size: 760290 bytes
[2022.10.28] 14:58:15.108 [40.107.223.62][41688215] Successfully wrote to the HDR file. (c:\SmarterMail\Spool\SubSpool6\20134186.hdr)
[2022.10.28] 14:58:15.108 [40.107.223.62][41688215] Data transfer succeeded, writing mail to 20134186.eml (MessageID: <TYZP104MB0246AAF6C0A4C7E12EEE21B9EF329@TYZP104MB0246.NAMP104.PROD.OUTLOOK.COM>)
[2022.10.28] 14:58:15.452 [40.107.223.62][41688215] cmd: MAIL FROM:<> SIZE=827767
[2022.10.28] 14:58:15.452 [40.107.223.62][41688215] senderEmail(1):  parsed using: <>
[2022.10.28] 14:58:15.452 [40.107.223.62][41688215] rsp: 554 Sending address not accepted due to spam filter
[2022.10.28] 14:58:15.452 [40.107.223.62][41688215] Mail rejected due to SMTP Spam Blocking: Null Sender (30,failed)
[2022.10.28] 14:58:15.812 [40.107.223.62][41688215] disconnected at 28/10/2022 2:58:15 PM

2 Replies

Reply to Thread
0
Char Lee Yeong Replied
Anyone able to help me on this issue?
0
Matt Petty Replied
Employee Post
You might want to move the Null Sender check to be only in the Spool. So uncheck "Inbound SMTP" and check "Spool Filtering" for the Null Sender check in Antispam settings. I would also put a much lower weight on the message, just because it's null sender doesn't necessarily make it spam. So I'd suggest going from weight 30 to weight 5 or 10.
Matt Petty Senior Software Developer SmarterTools Inc. www.smartertools.com

Reply to Thread