O365 - Creating Mail Flow Rule

We want to ensure our Phriendly Phishing simulation phishing emails are received by your staff. Most email providers will automatically catch suspicious emails; therefore, they are caught in junk and the individual never gets the email. This article will show you how to create a mail flow rule to ensure the emails are delivered to your users

Creating Mail Flow Rule. 

1. Access O365 Exchange admin center.

2. Select ‘mail flow’ from the left-hand menu pane.

3. Under ‘rules’ expand the ‘+’ icon dropdown menu and select ‘Bypass spam filtering…’

4. Provide a name for your rule, for example: ‘Phriendly Phishing bypass’.

5. Under the ‘*Apply this rule if…’ drop down menu select ‘The sender…’ > ’IP address is any of these ranges or exactly matches’.

6. From the ‘specify IP address ranges’ popup add the following Phriendly Phishing IP addresses: 54.252.116.154, 54.153.200.195, 52.63.70.98 and 52.64.99.134

7. Click on 'add condition' using the '+' sign.

8. Select '*A message header....' drop down menu select 'includes any of these words'.

9. Click '*Enter text' and enter: Received

10. Click ‘*Enter words…’

11. In the ‘specify words or phrases’ pop up please add individually:

• launch.phriendlyphishing.com
• 54.252.116.154
• 54.153.200.195
• 52.63.70.98
• 52.64.99.134

12. Click ‘Save’.

13. Under the ‘*Do the following…’ drop down, select 'Modify the message properties' and select ‘Set the spam confidence level (SCL) to…'>‘set the spam confidence level (SCL) to -1’.

14. Click ‘Save’, 'Next' and 'Finish'. The required rule has now been created and Phriendly Phishing emails should arrive in your inbox.

Please note that Microsoft mentions that it can take up to 30 minutes for the changes to take effect.