To remove the specific email addresses from the Exchange blacklist, run these commands:

Set-SenderFilterConfig -BlockedSenders @{Remove="[email protected]","[email protected]"}

This will only remove the addresses you specify, not the whole list.

Or:

Set-SenderFilterConfig –BlockedDomainsAndSubdomains @{Remove="block_me.net","spammers.com"}

Use Exchange Mail Flow Rules to Block Email

In EOL and Exchange Server, you can use Exchange mail flow rules (transport rules) to block e-mail from specific senders or domains. You can create mail rules from the Exchange Admin Center web interface.

If you are using the classic EAC interface:

1. Navigate to the Mail flow;
2. Create a new rule. Add the condition The sender -> is the person or domain is and specify the sender email addresses or domains to block;
3. If you want to block all external emails, select the option The sender is located… -> Outside the organization. Click More options;
4. Then add the action -> Block the message. You can block an email and send an NDR to the sender (Reject the message and include an explanation), NDR with the error code, or delete the e-mail message without sending any notification;
5. Specify the rule priority and save it.

In the EOL, the new Exchange Admin Centre is used to add a new transport rule:

1. Navigate to Mail flow -> Rules —> Add a rule;
2. Select the rule Restrict messages by sender or recipient;
3. Set the rule name;
4. Apply this rule if -> domain is -> specify the names of the domains you want to block (you can add multiple domains in a transport rule);
5. In the Do the following field, select Block the message and specify whether the NDR should be sent to the sender (for example, select reject the message with the enhanced status code and specify 5.7.1;
6. Then select Rule mode -> Enforce;
7. The new transport rule is disabled by default. Enable it in EAC.

All emails from the specified domains will now be rejected by EOL. You can see the name of the transport rule that rejected the email in the Microsoft 365 tracking logs:

Office 365 received this message but couldn't deliver it to the recipient (?[email protected]?). This happened because an email admin for your organization set up the following mail flow rule that rejected the message:
Mail flow rule: ? exch_RuleBlockDomain_contoso?

You can create a transport rule in Exchange tenant using PowerShell. Connect to your organization:

• Connecting to Exchange Servers using remote PowerShell
• How to connect to the Microsoft 365 tenant using the Exchange Online PowerShell module?

To create a new mail flow rule to block multiple domains, run

New-TransportRule -Name 'Block Spammers' -Comments 'Rule to block spammers' -Priority '0' -Enabled -FromAddressContainsWords '[email protected]' -DeleteMessage $true

Or:

$list1 = @('contoso.com','nwtraders.msft',)
New-TransportRule -Name "block_sender_domain" -RecipientAddressMatchesPatterns $list1 RejectMessageEnhancedStatusCode '5.7.1' -RejectMessageReasonText "Blocked recipients"

View information about the transport rule:

Get-TransportRule block_sender_domain | select name,State,SenderDomainIs,RejectMessageReasonText

Block Senders Using the Tenant Allow/Block List

You can block the sender list using the Tenant Allow/Block List feature in Exchange Online.

1. Sign in to the Microsoft 365 Defender https://security.microsoft.com.
2. Navigate to Policies & rules -> Threat policies -> Tenant Allow/Block List;
3. Click the Block button and add a list of email addresses and domains to be blacklisted;
4. A separate rule is created for each entry

You can also add addresses to the Tenant Allow/Block list using PowerShell:

New-TenantAllowBlockListItems -ListType Sender -Block -Entries '[email protected]','[email protected]' -NoExpiration

Display blocked addresses:

Get-TenantAllowBlockListItems -ListType Sender -Block|select value,ExpirationDate

Users in the organization will no longer be able to send e-mails to these addresses and the senders will receive an NDR:

5.7.1 Your message can't be delivered because one or more recipients are blocked by your organization's tenant allow/block list policy.

How to Blacklist Senders in Outlook?

You can block senders in a specific user’s mailbox, rather than at the level of the entire Exchange organization/tenant. The list of trusted and blocked users can be set in OWA (Settings -> Mail-> Junk email). To block an email address, simply add the address or domain to the Blocked Senders list and save the changes.

The same can be done in Outlook. Go to the Home tab in Outlook 365/2019/2016, click the Junk drop-down list, and select Junk E-mail Options.

Add the e-mail addresses or domains from which you do not want to receive e-mail in the Blocked Senders tab.

E-mails from this sender are automatically moved to the Junk Email folder of the user mailbox.

And the following message will appear in the tracking logs:

The message was delivered to the Junk Email folder: FilteredAsSpam

An Exchange administrator can manage the list of blocked domains and SMTP addresses for a specific mailbox using PowerShell. You can add a new sender address to the Junk list:

Set-MailboxJunkEmailConfiguration -Identity jrobinson –BlockedSendersandDomains @{Add="[email protected]"}

Or you can remove the specific email address from the blocked sender’s list:

Set-MailboxJunkEmailConfiguration -Identity jrobinson –BlockedSendersandDomains @{Remove="[email protected]"}

Display a list of blocked addresses:

Get-MailboxJunkEmailConfiguration –Identity jrobinson | FL BlockedSendersandDomains

Clear the list of blocked senders:

Set-MailboxJunkEmailConfiguration -Identity jrobinson -BlockedSendersAndDomains $null