Admin allow list doesn't bypass BULK Quarantine

Hello Stuart James ,

Thank you for reaching out to the community, so if I understood correct you want to an exception for bulk emails from certain senders, right? if that is the case then we already have this a feature request - CEMA-I-304

How would we bypass this in the time being Vivek?

Would it be by creating a policy for specific senders and then turning 'Bulk Spam' off for these senders to certain users?

Hi everyone! 
Please make sure that it is the "SMTP From" address that you have put into the Allow list and not the "Header From"
this is because what really counts is the 'SMTP From' (or Envelope-from) value when it comes to email transaction. The 'Header From' is the "From:" in the body of the email which is very easy to spoof and so if Allow list is based on it instead then there a lot more chances of False Positives. 
Here is a screenshot of what I mean:

Hi everyone! 
Please make sure that it is the "SMTP From" address that you have put into the Allow list and not the "Header From"
this is because what really counts is the 'SMTP From' (or Envelope-from) value when it comes to email transaction. The 'Header From' is the "From:" in the body of the email which is very easy to spoof and so if Allow list is based on it instead then there a lot more chances of False Positives. 
Here is a screenshot of what I mean:

Hi Josepalad, 

So what if the user/sender uses an Email Service Provider such as Sendgrid or send through a platform such as Salesforce?

You wouldn't be able to whitelist that as it will allow all legitimate and non-legitimate emails then right?

Came here to say exactly that Gerald Chau 

We can't whitelist *.sendgrid josepalad because that would be a big problem - it would effectively whitelist anyone that uses Sendgrid, which are hundreds of thousand of companies, if not more.

Need a way to whitelist SMTP From sendgrid.net where the Header From equals XXXX - maybe there's a better way?

Agreed Stuart James , we've actually seen a lot of spammers use Sendgrid and other ESPs as well so definitely cannot just whitelist any ESP addresses.