Exchange Edge Default Settings

Ich installiere in der Regel keinen Edge Server, da aus meiner Sicht die AntiSpam und AntiVirus-Funktion nicht zeitgemäß sind. Es gibt hier viele leistungsfähigere Produkte, von denen NoSpamProxy eine Lösung darstellen kann. Microsoft positioniert den Edge Server anscheinend auch nicht mehr als Lösung sondern fördert eher den Einsatz von Exchange Online Protection (Cloud/Office 365) in Verbindung mit Exchange Online oder auch Exchange OnPrem. Wer hier dann den Exchange Server nicht "aus dem Internet" erreichbar machen will, kann den Exchange Edge-Server als Relay einbauen. Ich habe hier einmal die "Default Einstellungen eines Exchange 2016 Edge Server als Referenz dokumentiert. Ich nutze Sie gerne zum Nachschlagen, wenn Einstellungen bei Kunden unterschiedlich und die Defaults nicht bekannt sind.

Achtung: Auf den Edge-Servern sind die verschiedenen Transport-Agenten zur Filterung von Mails (SenderID, SPF, Content, Attachment etc.) per Deffault aktiv.

Edge: Get-TransportConfig

Folgende Einstellungen sind auf dem Edge Server Transporteinstellungen als Standard konfiguriert.

[PS] C:\>Get-TransportConfig

AddressBookPolicyRoutingEnabled                             : False
AnonymousSenderToRecipientRatePerHour                       : 1800
ClearCategories                                             : True
ConvertDisclaimerWrapperToEml                               : False
DSNConversionMode                                           : PreserveDSNBody
JournalArchivingEnabled                                     : False
ExternalDelayDsnEnabled                                     : True
ExternalDsnDefaultLanguage                                  :
ExternalDsnLanguageDetectionEnabled                         : True
ExternalDsnMaxMessageAttachSize                             : 10 MB (10,485,760 bytes)
ExternalDsnReportingAuthority                               :
ExternalDsnSendHtml                                         : True
ExternalPostmasterAddress                                   :
GenerateCopyOfDSNFor                                        : {}
HygieneSuite                                                : Standard
InternalDelayDsnEnabled                                     : True
InternalDsnDefaultLanguage                                  :
InternalDsnLanguageDetectionEnabled                         : True
InternalDsnMaxMessageAttachSize                             : 10 MB (10,485,760 bytes)
InternalDsnReportingAuthority                               :
InternalDsnSendHtml                                         : True
InternalSMTPServers                                         : {}
JournalingReportNdrTo                                       : <>
LegacyJournalingMigrationEnabled                            : False
LegacyArchiveJournalingEnabled                              : False
LegacyArchiveLiveJournalingEnabled                          : False
RedirectUnprovisionedUserMessagesForLegacyArchiveJournaling : False
RedirectDLMessagesForLegacyArchiveJournaling                : False
MaxDumpsterSizePerDatabase                                  : 18 MB (18,874,368 bytes)
MaxDumpsterTime                                             : 7.00:00:00
MaxReceiveSize                                              : Unlimited
MaxRecipientEnvelopeLimit                                   : Unlimited
MaxRetriesForLocalSiteShadow                                : 2
MaxRetriesForRemoteSiteShadow                               : 4
MaxSendSize                                                 : 10 MB (10,485,760 bytes)
MigrationEnabled                                            : False
OpenDomainRoutingEnabled                                    : False
RejectMessageOnShadowFailure                                : False
Rfc2231EncodingEnabled                                      : False
SafetyNetHoldTime                                           : 00:10:00
ShadowHeartbeatFrequency                                    : 00:02:00
ShadowMessageAutoDiscardInterval                            : 2.00:00:00
ShadowMessagePreferenceSetting                              : PreferRemote
ShadowRedundancyEnabled                                     : True
ShadowResubmitTimeSpan                                      : 03:00:00
SupervisionTags                                             :
TLSReceiveDomainSecureList                                  : {}
TLSSendDomainSecureList                                     : {}
VerifySecureSubmitEnabled                                   : False
VoicemailJournalingEnabled                                  : True
HeaderPromotionModeSetting                                  : NoCreate
Xexch50Enabled                                              : True

Edge: Get-TransportService

Der Transport Service selbst hat folgende Einstellungen:

[PS] C:\>Get-TransportService

Name                                               : edge01
AntispamAgentsEnabled                              : True
ConnectivityLogEnabled                             : True
ConnectivityLogMaxAge                              : 30.00:00:00
ConnectivityLogMaxDirectorySize                    : 1000 MB (1,048,576,000 bytes)
ConnectivityLogMaxFileSize                         : 10 MB (10,485,760 bytes)
ConnectivityLogPath                                : C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs\Edge\Connectivity
DelayNotificationTimeout                           : 04:00:00
ExternalDNSAdapterEnabled                          : True
ExternalDNSAdapterGuid                             : 00000000-0000-0000-0000-000000000000
ExternalDNSProtocolOption                          : Any
ExternalDNSServers                                 : {}
ExternalIPAddress                                  :
InternalDNSAdapterEnabled                          : True
InternalDNSAdapterGuid                             : 00000000-0000-0000-0000-000000000000
InternalDNSProtocolOption                          : Any
InternalDNSServers                                 : {}
MaxConcurrentMailboxDeliveries                     : 20
MaxConcurrentMailboxSubmissions                    : 20
MaxConnectionRatePerMinute                         : 1200
MaxOutboundConnections                             : 1000
MaxPerDomainOutboundConnections                    : 20
MessageExpirationTimeout                           : 2.00:00:00
MessageRetryInterval                               : 00:15:00
MessageTrackingLogEnabled                          : True
MessageTrackingLogMaxAge                           : 30.00:00:00
MessageTrackingLogMaxDirectorySize                 : 1000 MB (1,048,576,000 bytes)
MessageTrackingLogMaxFileSize                      : 10 MB (10,485,760 bytes)
MessageTrackingLogPath                             : C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs\MessageTracking
IrmLogEnabled                                      : True
IrmLogMaxAge                                       : 30.00:00:00
IrmLogMaxDirectorySize                             : 250 MB (262,144,000 bytes)
IrmLogMaxFileSize                                  : 10 MB (10,485,760 bytes)
IrmLogPath                                         : C:\Program Files\Microsoft\Exchange Server\V15\Logging\IRMLogs
ActiveUserStatisticsLogMaxAge                      : 30.00:00:00
ActiveUserStatisticsLogMaxDirectorySize            : 250 MB (262,144,000 bytes)
ActiveUserStatisticsLogMaxFileSize                 : 10 MB (10,485,760 bytes)
ActiveUserStatisticsLogPath                        : C:\Program Files\Microsoft\Exchange
                                                     Server\V15\TransportRoles\Logs\Edge\ActiveUsersStats
ServerStatisticsLogMaxAge                          : 30.00:00:00
ServerStatisticsLogMaxDirectorySize                : 250 MB (262,144,000 bytes)
ServerStatisticsLogMaxFileSize                     : 10 MB (10,485,760 bytes)
ServerStatisticsLogPath                            : C:\Program Files\Microsoft\Exchange
                                                     Server\V15\TransportRoles\Logs\Edge\ServerStats
MessageTrackingLogSubjectLoggingEnabled            : True
OutboundConnectionFailureRetryInterval             : 00:30:00
IntraOrgConnectorProtocolLoggingLevel              : None
PickupDirectoryMaxHeaderSize                       : 64 KB (65,536 bytes)
PickupDirectoryMaxMessagesPerMinute                : 100
PickupDirectoryMaxRecipientsPerMessage             : 100
PickupDirectoryPath                                : C:\Program Files\Microsoft\Exchange
                                                     Server\V15\TransportRoles\Pickup
PipelineTracingEnabled                             : False
ContentConversionTracingEnabled                    : False
PipelineTracingPath                                : C:\Program Files\Microsoft\Exchange
                                                     Server\V15\TransportRoles\Logs\Edge\PipelineTracing
PipelineTracingSenderAddress                       :
PoisonMessageDetectionEnabled                      : True
PoisonThreshold                                    : 2
QueueMaxIdleTime                                   : 00:03:00
ReceiveProtocolLogMaxAge                           : 30.00:00:00
ReceiveProtocolLogMaxDirectorySize                 : 250 MB (262,144,000 bytes)
ReceiveProtocolLogMaxFileSize                      : 10 MB (10,485,760 bytes)
ReceiveProtocolLogPath                             : C:\Program Files\Microsoft\Exchange
                                                     Server\V15\TransportRoles\Logs\Edge\ProtocolLog\SmtpReceive
RecipientValidationCacheEnabled                    : True
ReplayDirectoryPath                                : C:\Program Files\Microsoft\Exchange
                                                     Server\V15\TransportRoles\Replay
RootDropDirectoryPath                              :
RoutingTableLogMaxAge                              : 7.00:00:00
RoutingTableLogMaxDirectorySize                    : 50 MB (52,428,800 bytes)
RoutingTableLogPath                                : C:\Program Files\Microsoft\Exchange
                                                     Server\V15\TransportRoles\Logs\Edge\Routing
SendProtocolLogMaxAge                              : 30.00:00:00
SendProtocolLogMaxDirectorySize                    : 250 MB (262,144,000 bytes)
SendProtocolLogMaxFileSize                         : 10 MB (10,485,760 bytes)
SendProtocolLogPath                                : C:\Program Files\Microsoft\Exchange
                                                     Server\V15\TransportRoles\Logs\Edge\ProtocolLog\SmtpSend
TransientFailureRetryCount                         : 6
TransientFailureRetryInterval                      : 00:10:00
AntispamUpdatesEnabled                             : False
InternalTransportCertificateThumbprint             : xxxxxxxx
TransportSyncEnabled                               : False
TransportSyncPopEnabled                            : False
WindowsLiveHotmailTransportSyncEnabled             : False
TransportSyncExchangeEnabled                       : False
TransportSyncImapEnabled                           : False
MaxNumberOfTransportSyncAttempts                   : 3
MaxActiveTransportSyncJobsPerProcessor             : 16
HttpTransportSyncProxyServer                       :
HttpProtocolLogEnabled                             : False
HttpProtocolLogFilePath                            :
HttpProtocolLogMaxAge                              : 7.00:00:00
HttpProtocolLogMaxDirectorySize                    : 250 MB (262,144,000 bytes)
HttpProtocolLogMaxFileSize                         : 10 MB (10,485,760 bytes)
HttpProtocolLogLoggingLevel                        : None
TransportSyncLogEnabled                            : False
TransportSyncLogFilePath                           :
TransportSyncLogLoggingLevel                       : None
TransportSyncLogMaxAge                             : 30.00:00:00
TransportSyncLogMaxDirectorySize                   : 10 GB (10,737,418,240 bytes)
TransportSyncLogMaxFileSize                        : 10 MB (10,485,760 bytes)
TransportSyncHubHealthLogEnabled                   : False
TransportSyncHubHealthLogFilePath                  :
TransportSyncHubHealthLogMaxAge                    : 30.00:00:00
TransportSyncHubHealthLogMaxDirectorySize          : 10 GB (10,737,418,240 bytes)
TransportSyncHubHealthLogMaxFileSize               : 10 MB (10,485,760 bytes)
TransportSyncAccountsPoisonDetectionEnabled        : False
TransportSyncAccountsPoisonAccountThreshold        : 2
TransportSyncAccountsPoisonItemThreshold           : 2
TransportSyncAccountsSuccessivePoisonItemThreshold : 3
TransportSyncRemoteConnectionTimeout               : 00:01:40
TransportSyncMaxDownloadSizePerItem                : 36 MB (37,748,736 bytes)
TransportSyncMaxDownloadSizePerConnection          : 50 MB (52,428,800 bytes)
TransportSyncMaxDownloadItemsPerConnection         : 1000
UseDowngradedExchangeServerAuth                    : False
IntraOrgConnectorSmtpMaxMessagesPerConnection      : 20
TransportSyncLinkedInEnabled                       : False
TransportSyncFacebookEnabled                       : False
QueueLogMaxAge                                     : 7.00:00:00
LatencyLogMaxAge                                   : 7.00:00:00
GeneralLogMaxAge                                   : 7.00:00:00
QueueLogMaxDirectorySize                           : 200 MB (209,715,200 bytes)
LatencyLogMaxDirectorySize                         : 200 MB (209,715,200 bytes)
GeneralLogMaxDirectorySize                         : 200 MB (209,715,200 bytes)
QueueLogMaxFileSize                                : 10 MB (10,485,760 bytes)
LatencyLogMaxFileSize                              : 10 MB (10,485,760 bytes)
GeneralLogMaxFileSize                              : 10 MB (10,485,760 bytes)
QueueLogPath                                       :
LatencyLogPath                                     :
GeneralLogPath                                     :
WlmLogMaxAge                                       : 7.00:00:00
WlmLogMaxDirectorySize                             : 250 MB (262,144,000 bytes)
WlmLogMaxFileSize                                  : 10 MB (10,485,760 bytes)
WlmLogPath                                         : C:\Program Files\Microsoft\Exchange
                                                     Server\V15\TransportRoles\Logs\Edge\WLM
AgentLogMaxAge                                     : 7.00:00:00
AgentLogMaxDirectorySize                           : 250 MB (262,144,000 bytes)
AgentLogMaxFileSize                                : 10 MB (10,485,760 bytes)
AgentLogPath                                       : C:\Program Files\Microsoft\Exchange
                                                     Server\V15\TransportRoles\Logs\Edge\AgentLog
AgentLogEnabled                                    : True
FlowControlLogMaxAge                               : 7.00:00:00
FlowControlLogMaxDirectorySize                     : 200 MB (209,715,200 bytes)
FlowControlLogMaxFileSize                          : 10 MB (10,485,760 bytes)
FlowControlLogPath                                 :
FlowControlLogEnabled                              : True
ProcessingSchedulerLogMaxAge                       : 7.00:00:00
ProcessingSchedulerLogMaxDirectorySize             : 200 MB (209,715,200 bytes)
ProcessingSchedulerLogMaxFileSize                  : 10 MB (10,485,760 bytes)
ProcessingSchedulerLogPath                         :
ProcessingSchedulerLogEnabled                      : True
ResourceLogMaxAge                                  : 7.00:00:00
ResourceLogMaxDirectorySize                        : 200 MB (209,715,200 bytes)
ResourceLogMaxFileSize                             : 10 MB (10,485,760 bytes)
ResourceLogPath                                    :
ResourceLogEnabled                                 : True
DnsLogMaxAge                                       : 7.00:00:00
DnsLogMaxDirectorySize                             : 100 MB (104,857,600 bytes)
DnsLogMaxFileSize                                  : 10 MB (10,485,760 bytes)
DnsLogPath                                         :
DnsLogEnabled                                      : False
JournalLogMaxAge                                   : 7.00:00:00
JournalLogMaxDirectorySize                         : 200 MB (209,715,200 bytes)
JournalLogMaxFileSize                              : 10 MB (10,485,760 bytes)
JournalLogPath                                     :
JournalLogEnabled                                  : True
TransportMaintenanceLogMaxAge                      : 7.00:00:00
TransportMaintenanceLogMaxDirectorySize            : 200 MB (209,715,200 bytes)
TransportMaintenanceLogMaxFileSize                 : 10 MB (10,485,760 bytes)
TransportMaintenanceLogPath                        :
TransportMaintenanceLogEnabled                     : True
TransportHttpLogMaxAge                             : 7.00:00:00
TransportHttpLogMaxDirectorySize                   : 250 MB (262,144,000 bytes)
TransportHttpLogMaxFileSize                        : 10 MB (10,485,760 bytes)
TransportHttpLogPath                               : C:\Program Files\Microsoft\Exchange
                                                     Server\V15\TransportRoles\Logs\Edge\TransportHttp
TransportHttpLogEnabled                            : True
RequestBrokerLogMaxAge                             : 7.00:00:00
RequestBrokerLogMaxDirectorySize                   : 200 MB (209,715,200 bytes)
RequestBrokerLogMaxFileSize                        : 10 MB (10,485,760 bytes)
RequestBrokerLogPath                               :
RequestBrokerLogEnabled                            : True
StorageRESTLogMaxAge                               : 7.00:00:00
StorageRESTLogMaxDirectorySize                     : 200 MB (209,715,200 bytes)
StorageRESTLogMaxFileSize                          : 10 MB (10,485,760 bytes)
StorageRESTLogPath                                 :
StorageRESTLogEnabled                              : True
AgentGrayExceptionLogEnabled                       : True
AgentGrayExceptionLogMaxAge                        : 7.00:00:00
AgentGrayExceptionLogMaxDirectorySize              : 200 MB (209,715,200 bytes)
AgentGrayExceptionLogMaxFileSize                   : 10 MB (10,485,760 bytes)
AgentGrayExceptionLogPath                          :
Identity                                           : comgtexedge01
IsValid                                            : True
ExchangeVersion                                    : 0.1 (8.0.535.0)
DistinguishedName                                  : CN=comgtexedge01,CN=Servers,CN=Exchange Administrative Group
                                                     (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First
                                                     Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,CN={GUID}
Guid                                               : 09156182-cd2e-4556-924f-3c97cea15967
ObjectCategory                                     : CN=ms-Exch-Exchange-Server,CN=Schema,CN=Configuration,CN={GUID}
ObjectClass                                        : {top, server, msExchExchangeServer}
OrganizationId                                     :
Id                                                 : comgtexedge01
OriginatingServer                                  : localhost
ObjectState                                        : Unchanged

Edge: Receive Connector

Für den Empfang aus dem Internet sind folgende Einstellungen hinterlegt:

[PS] C:\Windows\system32>Get-ReceiveConnector | fl


AuthMechanism                             : Tls, ExchangeServer
Banner                                    :
BinaryMimeEnabled                         : True
Bindings                                  : {0.0.0.0:25}
ChunkingEnabled                           : True
DefaultDomain                             :
DeliveryStatusNotificationEnabled         : True
EightBitMimeEnabled                       : True
SmtpUtf8Enabled                           : True
BareLinefeedRejectionEnabled              : False
DomainSecureEnabled                       : True
EnhancedStatusCodesEnabled                : True
LongAddressesEnabled                      : False
OrarEnabled                               : False
SuppressXAnonymousTls                     : False
ProxyEnabled                              : False
AdvertiseClientSettings                   : False
Fqdn                                      : edge01.msxfaq.net
ServiceDiscoveryFqdn                      :
TlsCertificateName                        :
Comment                                   :
Enabled                                   : True
ConnectionTimeout                         : 00:05:00
ConnectionInactivityTimeout               : 00:01:00
MessageRateLimit                          : 600
MessageRateSource                         : IPAddress
MaxInboundConnection                      : 5000
MaxInboundConnectionPerSource             : 20
MaxInboundConnectionPercentagePerSource   : 2
MaxHeaderSize                             : 256 KB (262,144 bytes)
MaxHopCount                               : 60
MaxLocalHopCount                          : 5
MaxLogonFailures                          : 3
MaxMessageSize                            : 36 MB (37,748,736 bytes)
MaxProtocolErrors                         : 5
MaxRecipientsPerMessage                   : 200
PermissionGroups                          : AnonymousUsers, ExchangeServers, Partners
PipeliningEnabled                         : True
ProtocolLoggingLevel                      : None
RemoteIPRanges                            : {0.0.0.0-255.255.255.255}
RequireEHLODomain                         : False
RequireTLS                                : False
EnableAuthGSSAPI                          : False
ExtendedProtectionPolicy                  : None
LiveCredentialEnabled                     : False
TlsDomainCapabilities                     : {}
Server                                    : edge01
TransportRole                             : HubTransport
RejectReservedTopLevelRecipientDomains    : False
RejectReservedSecondLevelRecipientDomains : False
RejectSingleLabelRecipientDomains         : False
AcceptConsumerMail                        : False
SizeEnabled                               : Enabled
TarpitInterval                            : 00:00:05
AuthTarpitInterval                        : 00:00:05
MaxAcknowledgementDelay                   : 00:00:30
AdminDisplayName                          :
ExchangeVersion                           : 0.1 (8.0.535.0)
Name                                      : Default internal receive connector edge01
DistinguishedName                         : CN=Default internal receive connector edge01,CN=SMTP Receive 
                                            Connectors,CN=Protocols,CN=edge01,CN=Servers,CN=Exchange
                                            Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First
                                            Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,CN={}
Identity                                  : edge01\Default internal receive connector edge01
Guid                                      : GUID
ObjectCategory                            : CN=ms-Exch-Smtp-Receive-Connector,CN=Schema,CN=Configuration,CN={GUID}
ObjectClass                               : {top, msExchSmtpReceiveConnector}
OrganizationId                            :
Id                                        : edge01\Default internal receive connector edge01
OriginatingServer                         : localhost
IsValid                                   : True
ObjectState                               : Unchanged

Interessant ist hierbei, dass die Werte für folgende Parameter nicht auf einen Hybrid-Mode optimiert sind.

   -MessageRateLimit 600 `
   -MaxInboundConnection                      5000 `
   -MaxInboundConnectionPerSource             20 `
   -MaxInboundConnectionPercentagePerSource   2

Gerade wenn der Edge-Server nicht über MX-Record von ganz vielen Systemen entsprechende Mails bekommen sondern von einem einzigen vorgelagerten Smarthost oder Service, dann würde ich die Werte wie folgt hochsetzen

get-receiveconnector | set-receiveconnector `
   -MessageRateLimit unlimited `
   -MaxInboundConnection                      5000 `
   -MaxInboundConnectionPerSource             unlimited `
   -MaxInboundConnectionPercentagePerSource    100

Ansonsten könnte es sein, dass im Eventlog folgendes zu finden ist:

Log Name:      Application
Source:        MSExchangeTransport
Date:          11/11/2016 11:37:52 AM
Event ID:      1021
Task Category: SmtpReceive
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      edge01.msxfaq.de
Description:
Receive connector Default internal receive connector edge01 rejected an incoming connection 
from IP address x.x.x.x. The maximum number of connections per source (20) for this 
connector has been reached by this source IP address.

Edge: SendConnector zum Internet

Zum Versand gibt es auf einem Edge Server in der Regel zwei Connectoren. der erste geht zum Internet. In dem Beispiel sendet der Connector die Mails über zwei unkenntlich gemachte Smarthosts

[PS] C:\>(Get-SendConnector[0])

AddressSpaces                : {smtp:*;50}
AuthenticationCredential     :
CloudServicesMailEnabled     : False
Comment                      :
ConnectedDomains             : {}
ConnectionInactivityTimeOut  : 00:10:00
ConnectorType                : Default
DNSRoutingEnabled            : False
DomainSecureEnabled          : False
Enabled                      : True
ErrorPolicies                : Default
ForceHELO                    : False
Fqdn                         :
FrontendProxyEnabled         : False
HomeMTA                      :
HomeMtaServerId              :
Identity                     : EdgeSync - MSXFAQ to Internet
IgnoreSTARTTLS               : False
IsScopedConnector            : False
IsSmtpConnector              : True
MaxMessageSize               : 35 MB (36,700,160 bytes)
Name                         : EdgeSync - MSXFAQ to Internet
Port                         : 25
ProtocolLoggingLevel         : None
Region                       : NotSpecified
RequireOorg                  : False
RequireTLS                   : False
SmartHostAuthMechanism       : None
SmartHosts                   : {[x.x.x.x], [x.x.x.x]}
SmartHostsString             : [x.x.x.x],[x.x.x.x]
SmtpMaxMessagesPerConnection : 20
SourceIPAddress              : 0.0.0.0
SourceRoutingGroup           : Exchange Routing Group (DWBGZMFD01QNBJR)
SourceTransportServers       : {}
TlsAuthLevel                 :
TlsCertificateName           :
TlsDomain                    :
UseExternalDNSServersEnabled : False

Per Default ist keine Quelladresse vorgegeben und es werden maximal 20 Connections pro Zielhost geöffnet. Das sollte auch in Verbindung mit einem Smarthost eigentlich genug sein, da Exchange durchaus mehrere Nachrichten über die gleiche TCP-Connection sendet.

Edge: SendConnector nach Intern

Der zweite Connector leitet alle Mails an die interne Organisation weiter. Der Addressraum "--" ist dafür reserviert

[PS] C:\>(Get-SendConnector)[1]


AddressSpaces                : {smtp:--;100}
AuthenticationCredential     :
CloudServicesMailEnabled     : False
Comment                      :
ConnectedDomains             : {}
ConnectionInactivityTimeOut  : 00:10:00
ConnectorType                : Default
DNSRoutingEnabled            : False
DomainSecureEnabled          : False
Enabled                      : True
ErrorPolicies                : Default
ForceHELO                    : False
Fqdn                         :
FrontendProxyEnabled         : False
HomeMTA                      :
HomeMtaServerId              :
Identity                     : EdgeSync - Inbound to MSXFAQ
IgnoreSTARTTLS               : False
IsScopedConnector            : False
IsSmtpConnector              : True
MaxMessageSize               : Unlimited
Name                         : EdgeSync - Inbound to MSXFAQ
Port                         : 25
ProtocolLoggingLevel         : None
Region                       : NotSpecified
RequireOorg                  : False
RequireTLS                   : False
SmartHostAuthMechanism       : ExchangeServer
SmartHosts                   : {--}
SmartHostsString             : --
SmtpMaxMessagesPerConnection : 20
SourceIPAddress              : 0.0.0.0
SourceRoutingGroup           : Exchange Routing Group (DWBGZMFD01QNBJR)
SourceTransportServers       : {}
TlsAuthLevel                 :
TlsCertificateName           :
TlsDomain                    :
UseExternalDNSServersEnabled : False

Die Grenzwerte sind hier wie beim externen Connector gesetzt.

Edge: Get-TransportAgent

Ein einfach installierter Edge hat natürlich auch Filter aktiv

[PS] C:\>Get-TransportAgent

Identity                                           Enabled         Priority
--------                                           -------         --------
Connection Filtering Agent                         False           1
Address Rewriting Inbound Agent                    True            2
Edge Rule Agent                                    True            3
Content Filter Agent                               False           4
Sender Id Agent                                    True            5
Sender Filter Agent                                False           6
Recipient Filter Agent                             False           7
Protocol Analysis Agent                            True            8
Attachment Filtering Agent                         False           9
Address Rewriting Outbound Agent                   True            10

Für die meisten Agenten gibt es ein eigenes Commandlet zur Konfiguration.

Es macht einen Unterschied, ob Sie den TransportAgent deaktivieren oder in der Konfiguration die Funktion deaktivieren.

Edge: Get-RecipientFilterConfig

[PS] C:\>Get-RecipientFilterConfig


Name                       : RecipientFilterConfig
BlockedRecipients          : {}
RecipientValidationEnabled : False
BlockListEnabled           : False
Enabled                    : True
ExternalMailEnabled        : True
InternalMailEnabled        : False
AdminDisplayName           :
ExchangeVersion            : 0.1 (8.0.535.0)
DistinguishedName          : CN=RecipientFilterConfig,CN=Message Hygiene,CN=Transport Settings,CN=First
                             Organization,CN=Microsoft
                             Exchange,CN=Services,CN=Configuration,CN={GUID}
Identity                   : RecipientFilterConfig
Guid                       : 69382f4c-fbe0-4792-aa2b-def0b766e042
ObjectCategory             : CN=ms-Exch-Message-Hygiene-Recipient-Filter-Config,CN=Schema,CN=Configuration,CN={GUID}
ObjectClass                : {top, msExchAgent, msExchMessageHygieneRecipientFilterConfig}
OrganizationId             :
Id                         : RecipientFilterConfig
OriginatingServer          : localhost
IsValid                    : True
ObjectState                : Unchanged

Edge: Get-ContentFilterConfig

[PS] C:\>Get-ContentFilterConfig

Name                                  : ContentFilterConfig
RejectionResponse                     : Message rejected as spam by Content Filtering.
OutlookEmailPostmarkValidationEnabled : True
BypassedRecipients                    : {}
QuarantineMailbox                     :
SCLRejectThreshold                    : 7
SCLRejectEnabled                      : True
SCLDeleteThreshold                    : 9
SCLDeleteEnabled                      : False
SCLQuarantineThreshold                : 9
SCLQuarantineEnabled                  : False
BypassedSenders                       : {}
BypassedSenderDomains                 : {}
Enabled                               : True
ExternalMailEnabled                   : True
InternalMailEnabled                   : False
AdminDisplayName                      :
ExchangeVersion                       : 0.1 (8.0.535.0)
DistinguishedName                     : CN=ContentFilterConfig,CN=Message Hygiene,CN=Transport Settings,CN=First
                                        Organization,CN=Microsoft
                                        Exchange,CN=Services,CN=Configuration,CN={24A8D45B-BA42-4019-8C52-2D5942D91DB9}
Identity                              : ContentFilterConfig
Guid                                  : 08897d91-84fd-4042-842b-784ce920786d
ObjectCategory                        : CN=ms-Exch-Message-Hygiene-Content-Filter-Config,CN=Schema,CN=Configuration,CN=
                                        {24A8D45B-BA42-4019-8C52-2D5942D91DB9}
ObjectClass                           : {top, msExchAgent, msExchMessageHygieneContentFilterConfig}
WhenChanged                           : 12/21/2017 3:27:12 PM
WhenCreated                           : 11/2/2017 8:40:40 AM
WhenChangedUTC                        : 12/21/2017 2:27:12 PM
WhenCreatedUTC                        : 11/2/2017 7:40:40 AM
OrganizationId                        :
Id                                    : ContentFilterConfig
OriginatingServer                     : localhost
IsValid                               : True
ObjectState                           : Unchanged

Get-SenderFilterConfig

[PS] C:\>Get-SenderFilterConfig


Name                         : SenderFilterConfig
BlockedSenders               : {}
BlockedDomains               : {}
BlockedDomainsAndSubdomains  : {}
Action                       : Reject
BlankSenderBlockingEnabled   : False
RecipientBlockedSenderAction : Reject
Enabled                      : True
ExternalMailEnabled          : True
InternalMailEnabled          : False
AdminDisplayName             :
ExchangeVersion              : 0.1 (8.0.535.0)
DistinguishedName            : CN=SenderFilterConfig,CN=Message Hygiene,CN=Transport Settings,CN=First
                               Organization,CN=Microsoft
                               Exchange,CN=Services,CN=Configuration,CN={24A8D45B-BA42-4019-8C52-2D5942D91DB9}
Identity                     : SenderFilterConfig
Guid                         : 21f0b1e0-3c62-488d-af8c-8a7fd1bf2cfc
ObjectCategory               : CN=ms-Exch-Message-Hygiene-Sender-Filter-Config,CN=Schema,CN=Configuration,CN={24A8D45B-
                               BA42-4019-8C52-2D5942D91DB9}
ObjectClass                  : {top, msExchAgent, msExchMessageHygieneSenderFilterConfig}
WhenChanged                  : 11/2/2017 8:40:40 AM
WhenCreated                  : 11/2/2017 8:40:40 AM
WhenChangedUTC               : 11/2/2017 7:40:40 AM
WhenCreatedUTC               : 11/2/2017 7:40:40 AM
OrganizationId               :
Id                           : SenderFilterConfig
OriginatingServer            : localhost
IsValid                      : True
ObjectState                  : Unchanged



[PS] C:\Windows\system32>

Get-AttachmentFilterEntry

[PS] C:\>Get-AttachmentFilterEntry |FT -AutoSize

       Type Name                     Identity                             IsValid ObjectState
       ---- ----                     --------                             ------- -----------
ContentType application/x-msdownload ContentType:application/x-msdownload    True   Unchanged
ContentType message/partial          ContentType:message/partial             True   Unchanged
ContentType text/scriptlet           ContentType:text/scriptlet              True   Unchanged
ContentType application/prg          ContentType:application/prg             True   Unchanged
ContentType application/msaccess     ContentType:application/msaccess        True   Unchanged
ContentType text/javascript          ContentType:text/javascript             True   Unchanged
ContentType application/x-javascript ContentType:application/x-javascript    True   Unchanged
ContentType application/javascript   ContentType:application/javascript      True   Unchanged
ContentType x-internet-signup        ContentType:x-internet-signup           True   Unchanged
ContentType application/hta          ContentType:application/hta             True   Unchanged
   FileName *.xnk                    FileName:*.xnk                          True   Unchanged
   FileName *.wsh                    FileName:*.wsh                          True   Unchanged
   FileName *.wsf                    FileName:*.wsf                          True   Unchanged
   FileName *.wsc                    FileName:*.wsc                          True   Unchanged
   FileName *.vbs                    FileName:*.vbs                          True   Unchanged
   FileName *.vbe                    FileName:*.vbe                          True   Unchanged
   FileName *.vb                     FileName:*.vb                           True   Unchanged
   FileName *.url                    FileName:*.url                          True   Unchanged
   FileName *.shs                    FileName:*.shs                          True   Unchanged
   FileName *.shb                    FileName:*.shb                          True   Unchanged
   FileName *.sct                    FileName:*.sct                          True   Unchanged
   FileName *.scr                    FileName:*.scr                          True   Unchanged
   FileName *.scf                    FileName:*.scf                          True   Unchanged
   FileName *.reg                    FileName:*.reg                          True   Unchanged
   FileName *.prg                    FileName:*.prg                          True   Unchanged
   FileName *.prf                    FileName:*.prf                          True   Unchanged
   FileName *.pif                    FileName:*.pif                          True   Unchanged
   FileName *.pcd                    FileName:*.pcd                          True   Unchanged
   FileName *.ops                    FileName:*.ops                          True   Unchanged
   FileName *.mst                    FileName:*.mst                          True   Unchanged
   FileName *.msp                    FileName:*.msp                          True   Unchanged
   FileName *.msi                    FileName:*.msi                          True   Unchanged
   FileName *.psc2                   FileName:*.psc2                         True   Unchanged
   FileName *.psc1                   FileName:*.psc1                         True   Unchanged
   FileName *.ps2xml                 FileName:*.ps2xml                       True   Unchanged
   FileName *.ps2                    FileName:*.ps2                          True   Unchanged
   FileName *.ps11xml                FileName:*.ps11xml                      True   Unchanged
   FileName *.ps11                   FileName:*.ps11                         True   Unchanged
   FileName *.ps1xml                 FileName:*.ps1xml                       True   Unchanged
   FileName *.ps1                    FileName:*.ps1                          True   Unchanged
   FileName *.msc                    FileName:*.msc                          True   Unchanged
   FileName *.mdz                    FileName:*.mdz                          True   Unchanged
   FileName *.mdw                    FileName:*.mdw                          True   Unchanged
   FileName *.mdt                    FileName:*.mdt                          True   Unchanged
   FileName *.mde                    FileName:*.mde                          True   Unchanged
   FileName *.mdb                    FileName:*.mdb                          True   Unchanged
   FileName *.mda                    FileName:*.mda                          True   Unchanged
   FileName *.lnk                    FileName:*.lnk                          True   Unchanged
   FileName *.ksh                    FileName:*.ksh                          True   Unchanged
   FileName *.jse                    FileName:*.jse                          True   Unchanged
   FileName *.js                     FileName:*.js                           True   Unchanged
   FileName *.isp                    FileName:*.isp                          True   Unchanged
   FileName *.ins                    FileName:*.ins                          True   Unchanged
   FileName *.inf                    FileName:*.inf                          True   Unchanged
   FileName *.hta                    FileName:*.hta                          True   Unchanged
   FileName *.hlp                    FileName:*.hlp                          True   Unchanged
   FileName *.fxp                    FileName:*.fxp                          True   Unchanged
   FileName *.exe                    FileName:*.exe                          True   Unchanged
   FileName *.csh                    FileName:*.csh                          True   Unchanged
   FileName *.crt                    FileName:*.crt                          True   Unchanged
   FileName *.cpl                    FileName:*.cpl                          True   Unchanged
   FileName *.com                    FileName:*.com                          True   Unchanged
   FileName *.cmd                    FileName:*.cmd                          True   Unchanged
   FileName *.chm                    FileName:*.chm                          True   Unchanged
   FileName *.bat                    FileName:*.bat                          True   Unchanged
   FileName *.bas                    FileName:*.bas                          True   Unchanged
   FileName *.asx                    FileName:*.asx                          True   Unchanged
   FileName *.app                    FileName:*.app                          True   Unchanged
   FileName *.adp                    FileName:*.adp                          True   Unchanged
   FileName *.ade                    FileName:*.ade                          True   Unchanged

Weitere Links