Get-Mailprotection
1.14
Most of the Querys are simple DNS Querys (NS, MX, SPF, DKIM, DMARC, BIMI, MTA-STS, TLSRPT).
The Script uses also DNS over HTTP for several checks (ZoneSigned, TLSA Record for DANE).
Also some Webrequests are required for MTA-STS, TenantID (OIDC), Security.txt.
And connects via
Most of the Querys are simple DNS Querys (NS, MX, SPF, DKIM, DMARC, BIMI, MTA-STS, TLSRPT).
The Script uses also DNS over HTTP for several checks (ZoneSigned, TLSA Record for DANE).
Also some Webrequests are required for MTA-STS, TenantID (OIDC), Security.txt.
And connects via SMTP to check if the Server supports STARTTLS.
Installation Options
Owners
Copyright
Free to copy, inspire, etc...
Package Details
Author(s)
- Andres Bohren Contact: a.bohren@icewolf.ch https://twitter.com/andresbohren
Tags
DNSSEC MX Reverse Lookup STARTTLS SPF DKIM DMARC DANE MTA-STS TLSRPT BIMI CAA M365 TenantID Security.txt
Functions
Get-SPFLookupCount Invoke-STARTTLS Get-MailProtection
Dependencies
This script has no dependencies.
Release Notes
Version 1.14
- Moved from Resolve-DNS to DNS over Https (DoH) https://dns.google/resolve
- Addet Property DMARCAuthorisationRecord
- Addet Property SPFLookupCount - SPF Record Lookup check if max 10 records are used
- Fixed some Autodiscover / Lyncdiscover Bugs
- Changed Parameter -Silent and -Returnobject to Switch
FileList
- Get-Mailprotection.nuspec
- Get-Mailprotection.ps1