How to Fix Spam Filter Ignoring Allow List and Mail Flow Rules
Question details
The user is experiencing an issue where emails from allowed domains are incorrectly classified as spam and routed to the Junk folder, bypassing both the allow list and mail flow rules.
- Product
- Microsoft Exchange
- Device & OS
- not provided
- Scenario
- Trying to whitelist a sender domain to ensure legitimate emails are delivered to the inbox instead of the Junk folder.
- Observed behavior
- Messages from allowed sender domains are still being classified as spam and delivered to the Junk folder, even after setting the spam confidence level (SCL) to zero.
Ensure you have administrator privileges in the Exchange admin center, as troubleshooting mail flow rules and running message traces require elevated administrative permissions.
Run a Message Trace in Exchange Admin Center
Use the message trace tool to track the email's exact path and identify which specific rule or filtering service is overriding your allow list.
When an allow list or a mail flow rule setting the Spam Confidence Level (SCL) to zero fails, it often means a higher-priority security policy is taking precedence. A message trace will provide granular details on exactly how the message was processed.
Log in to the Exchange admin center using your Microsoft 365 administrator credentials.
In the left-hand navigation menu, expand 'Mail flow' and select 'Message trace'.
Enter the affected sender's domain, the recipient's email address, and select the time range during which the emails were sent to the Junk folder. Click 'Search'.
Open the trace details for a specific email. Review the 'Message events' to see which anti-spam policy, blocked sender list, or third-party filtering service classified the message as spam.
Verify Anti-Spam Policies and Blocked Lists
Ensure there are no conflicting tenant-level block lists or threat policies that take precedence over the user's allow list.
Looking for a Reliable and Lightweight Office Suite? Try WPS Office
While managing Exchange admin settings requires specific Microsoft tools, your day-to-day document productivity shouldn't be complicated. WPS Office provides a lightweight, highly compatible, and free alternative to Microsoft Office for all your document, spreadsheet, and presentation needs.
- 1. Download the Installer: Visit the official WPS Office website and click the free download button for your operating system.
- 2. Run the Installation: Open the downloaded file and follow the quick on-screen instructions to install the suite.
- 3. Start Creating: Launch WPS Office to immediately start creating and editing your documents, spreadsheets, and presentations.
Frequently Asked Questions
Why does my mail flow rule setting SCL to 0 not work?
Mail flow rules can be overridden by high-confidence spam filtering, spoofing protections (such as SPF, DKIM, or DMARC failures), or Tenant Allow/Block Lists. Running a message trace is the best way to reveal the exact overriding policy.
Do safe sender lists override Exchange spam filters?
End-user safe sender lists generally prevent standard emails from going to the Junk folder. However, tenant-level security policies and high-confidence phishing or malware filters in Exchange will still override user settings to protect the organization.
What is a message trace in Exchange?
A message trace is an administrative diagnostic tool in the Exchange admin center. It allows administrators to track the exact path of an email message as it travels through the Exchange service, showing if it was delivered, rejected, or routed to the junk folder by a specific rule.
