"X-Gm-Auto-Quarantined: 1" SMTP Header Tag

[MagpiesMike]

All -

I am working with a client to understand why a particular group of emails are landing in Quarantine. Note that I have 1.) reviewed the Matched Rules in Quarantine Manager and that was blank 2.) used the Email Log Search which said the message was delivered without an error however post delivery details shows it was placed in Quarantine, and 3.)  used the MessageHeader tool in Google Admin Toolbox which provided no real insights. 

QUESTION: What is the "X-Gm-Auto-Quarantined: 1" SMTP Header Tag and how is that placed in the email header?

I have not seen that tag and a search around the web landed no hits on it?

Thanks in advance for any guidance.

Mike

[ajojose33333344]

@MagpiesMike  so when you have these safety rules enabled,it will not show in the matched rules because they are actually not rules but are considered as configuration.

So please check in your admin console for ....Apps>Google Workspace>Gmail>safety and most probably under it Spoofing and authentication configuration could be causing this issue. there are a few other options also in that page, which could also be the reason.

Note: It is always recommended to have a tight safety setting and address the issue with the incoming email,however, you can take decisions and may be can whitelist these domains/users if your domain wishes to do so.

[MagpiesMike]

All,

Google Support confirmed that the SMTP header "X-Gm-Auto-Quarantined: 1"was inserted by the sending server, forcing a quarantine no matter what settings are configured by the receiving server. At least that was what I was told. If I find out anything different I'll follow up.

Mike

[ajojose33333344]

@MagpiesMike thanks for sharing it and that part is true the header usually gets applied by the server, in routing also we have the option like below to do that for our server:

maybe the same way there was a rule on the recipient server, but I thought we could bypass getting them quarantined in our settings.

Please let us know once you got the final conclusion.

Please note: on my first comment I was focusing on how to solve the issue, which apparently didn't help.

[ajojose33333344]

@MagpiesMike You might have to talk to the sender team to identify why such a tag is added if the email is genuine,maybe these messages are failing spf,dkim or dmarc

for which the sender might have configured this such that no spoofing emails will reach out to them on behalf of their domain.