I would suggest adding "autodiscover" to the list of disallowed hosts. It is used by Microsoft Outlook and Exchange ActiveSync clients (e.g. in smartphones) to

I would suggest adding "autodiscover" to the list of disallowed hosts. It is used by Microsoft Outlook and Exchange ActiveSync clients (e.g. in smartphones) to automatically detect the correct server settings.