What does that mean? I see this on a host that uses trendmicro as an email firewall. I suspect it means that the organisation is using MS Outlook as their email provider behind the email firewall, correct?

    • daveyOsborn@infosec.pubOP
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 day ago

      yup, that’s indeed what I do generally, in the end. I always start with an MX lookup and DNS TXT lookup just to see if the email infra looks safe enough, and compatible with my msg. I often find the answer is trivially /no/, because usually the MX server is simply *outlook*. But these email firewalls create a bit of opacity so I wanted some clarity on that.

      Worth noting that MS has been caught snooping on msgs that traverse their network when the msg is about Microsoft (even when MS Corp is not themselves the sender or recipient).