Some background:
our mx records point to a cloud service where all our user mailboxes reside. we have multiple domains, aligned to various lines of business & corporate entities.
Ironports process outbound system mail only, senders may be things like system@corpdomain.com
We recently had an event that degraded the reputation of one of our domains, so emailed reports & alerts to our sysadmins that come from @corpdomain.com are getting hard bounced. This then generates bounce messages which ESA attempts to deliver to the sender, @corpdomain.com. Since this uses the public MX record, it gets directed outbound & hard bounced, compounding the issue.
Is there a way to re-write the sender of a bounce notification so it will get delivered?
