Skip to content

Commit 1988772

Browse files
authored
Clarify blocking instructions for high confidence phishing
1 parent ab2d10c commit 1988772

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

defender-office-365/tenant-allow-block-list-about.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@ Use the **Submissions** page (also known as *admin submission*) at <https://secu
5959
- Users in the organization can't send email to these blocked domains and addresses. They receive the following non-delivery report (also known as an NDR or bounce message): `550 5.7.703 Your message can't be delivered because messages to XXX, YYY are blocked by your organization using Tenant Allow Block List.` The entire message is blocked for all internal and external recipients of the message, even if only one recipient email address or domain is defined in a block entry.
6060

6161
> [!TIP]
62-
> Blocking a specific sender or domain in the Tenant Allow/Block List will treat all messages as High Confidence Phish. If you prefer to treat all messages from a specific sender or domain as Spam, add the email address or domain to the block list in [anti-spam policies](anti-spam-policies-configure.md).
62+
> Blocking a specific sender or domain in the Tenant Allow/Block List treats those messages as high confidence phishing. To treat those messages as spam, add the sender to the blocked senders list or blocked domains list in [anti-spam policies](anti-spam-policies-configure.md).
6363
6464
- **[Files](submissions-admin.md#report-questionable-email-attachments-to-microsoft)**: Email messages that contain these blocked files are blocked as *malware*. Messages containing the blocked files are quarantined.
6565

0 commit comments

Comments
 (0)