# No IP Allow Lists have been configured

IP addresses contained in the IP allow list are able to bypass spam, phishing and spoofing checks, potentially resulting in more spam.

Source: https://maester.dev/docs/tests/ORCA.114

<!-- This file is generated by website/scripts/generate-test-docs.mjs. Do not edit manually. -->

<div class="test-byline"><div class="test-byline-avatars"><a class="test-byline-avatar test-byline-avatar--author" href="/contributors/soulemike" title="Michael Soule · Original author"><img src="https://github.com/soulemike.png" alt="Michael Soule" width="28" height="28" loading="lazy" decoding="async" /></a></div><div class="test-byline-meta"><span class="test-byline-text">Contributed by <a href="/contributors/soulemike">Michael Soule</a></span><a class="test-byline-link" href="/contributors">All contributors →</a></div></div>

<p class="test-part">Part of <a href="/docs/tests/orca">ORCA</a> · Defender · Anti-spam · <a href="/docs/tests">All checks</a></p>

```powershell title="Run this check"
Invoke-Maester -TestId ORCA.114
```

## Overview

IP addresses contained in the IP allow list are able to bypass spam, phishing and spoofing checks, potentially resulting in more spam. Ensure that the IP list is kept to a minimum.

#### Remediation action

Remove IP addresses from IP allow list.

#### Related Links

* [Microsoft 365 Defender Portal - Anti-spam settings](https://security.microsoft.com/antispam)
* [Use Anti-Spam Policy IP Allow lists](https://aka.ms/orca-antispam-docs-3)

## Details

<details>
<summary>Every attribute of this check</summary>

| Field | Value |
| --- | --- |
| Test ID | ORCA.114 |
| Severity | Medium |
| Suite | ORCA |
| Product | Defender |
| Related products | Exchange Online |
| Feature | Anti-spam |
| Area | Email and collaboration protection |
| Resource type | Tenant |
| User impact | Low |
| Implementation cost | Medium |
| MITRE ATT&CK | T1566 Phishing, T1684.002 Email Spoofing |
| Supports controls | nist-800-53-r5:AC-4 |
| PowerShell test | [Test-ORCA114](https://github.com/maester365/maester/blob/main/tests/orca/Test.ORCA.114.ps1) |
| Services | ExchangeOnline |

</details>

## Source

- Test: [`tests/orca/Test.ORCA.114.ps1`](https://github.com/maester365/maester/blob/main/tests/orca/Test.ORCA.114.ps1)
- Documentation: [`tests/orca/Test.ORCA.114.md`](https://github.com/maester365/maester/blob/main/tests/orca/Test.ORCA.114.md)