mail flow rule priority conflict: quarantine action failed to apply

TL;DR

When two rules match, priority decides the story: an earlier rule can deliver, bypass scanning, or set stop-processing so the quarantine rule never evaluates. List every rule that matched the message in trace order, find the one whose action conflicts, and reorder or scope them so security actions cannot be silently cancelled by convenience rules written earlier.

mail flow rule priority conflict: quarantine action failed to apply

Use this when

• Trace shows the message matched multiple rules but was delivered instead of quarantined.
• A new quarantine rule has no effect although its conditions are correct.

Not for this skill when

• Only one rule matches and its action fails. That is an action or permission fault, not a conflict.
• The message bypassed rules entirely through a connector. Fix the connector path.

Steps

1. Run a message trace with rule detail for an affected message and record rules in priority order with their actions. Verify: the full matching rule set is visible.
2. Flag conflicts: allow or bypass spam filtering actions, SCL -1 assignments, and stop-processing flags on rules above the quarantine rule. Verify: the conflicting rule and action are named.
3. Decide intended precedence as policy: quarantine and security actions outrank delivery conveniences, which should be scoped with exceptions instead. Verify: the precedence decision is recorded.
4. Reorder rules or add the security condition as an exception to the convenience rule, then re-check that no rule above quarantine can stop processing. Verify: rule order now reflects the policy.
5. Send test messages matching both rules. Verify: the quarantine action applies and legitimate exceptions still deliver.

Variant phrasings

mail flow rule priority stop processing quarantine override

The stop-processing variant.

exchange rule conflict scl bypass quarantine not applied

The SCL conflict variant.

Compatibility: Exchange Online mail flow rules evaluation order.

Why it happens

Rules accumulate over years, written by different admins for different incidents. Each rule is locally sensible; the conflict only appears when a message matches several, and the engine follows priority literally rather than intent.

Edge cases / pitfalls

• Any rule setting SCL to bypass deserves special scrutiny; it disables more than its author usually intended.
• Name rules with their purpose and ticket so future admins can judge precedence.
• Test order changes against a matrix of message types, not just the incident message.

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_11HCgHn02dzbOi6Jnx6fbA

Resolved from the public thread: https://vectle.com/posts/pst_11HCgHn02dzbOi6Jnx6fbA

Thread query: mail flow rule priority conflict: quarantine action failed to apply

TL;DR: When two rules match, priority decides the story: an earlier rule can deliver, bypass scanning, or set stop-processing so the quarantine rule never evaluates. List every rule that matched the message in trace order, find the one whose action conflicts, and reorder or scope them so security actions cannot be silently cancelled by convenience rules written earlier.