Table of Contents

Exchange E-Mail Security

See also Using the Exchange Shell to Track Messages

Enable AntiSpam

https://www.techieshelp.com/exchange-2013-enable-anti-spam/

Whitelist a Sender or Domain

https://www.informaticar.net/exchange-server-whitelisting-domains-and-email-addresses

Whitelist an IP Address or Range

Show Mailbox Anti-Spam

Get-MailboxJunkEmailConfiguration -Identity <e-mail address>

Get-Mailbox -Identity <e-mail address> | Format-List SCL*,Bypass*,*SenderAuth*

SMTP Relay Filters

http://woshub.com/configure-spam-protection-in-exchange-2013-rbl-providers/

https://blog.ahasayen.com/smtp-relay-exchange-internalsmtpservers/

https://docs.microsoft.com/en-us/Exchange/antispam-and-antimalware/antispam-protection/antispam-on-mailbox-servers?view=exchserver-2019

Get the current list: 

Get-TransportConfig | fl InternalSMTPServers

Replace list: 

Set-TransportConfig -InternalSMTPServers 192.168.1.0/24, 192.168.5.2

Add to list: 

Set-TransportConfig -InternalSMTPServers @{Add="<ip address1>","<ip address2>"...}

DKIM

Exchange 2019 (on-prem) does not verify incoming DKIM signatures or sign outgoing by default.

Receiving

We currently rely on MailCleaner (inbound mail filtering) to verify DKIM signatures as Exchange does not do so.

Sending

:!: This free tool will sign outgoing messages for the domains you specify.

The GUI configuration tool is not added to the Start Menu but is located here: “C:\Program Files\Exchange DkimSigner\Configuration.DkimSigner.exe”

https://opentechtips.com/how-to-configure-dkim-on-exchange-2019-the-simple-way/

https://github.com/Pro/dkim-exchange/wiki/Installation

https://github.com/Pro/dkim-exchange/wiki