Get-Mailprotection

1.14

This Script checks diffrent DNS Records about a Domain - mostly about Mailsecurity Settings.
Most of the Querys are simple DNS Querys (NS, MX, SPF, DKIM, DMARC, BIMI, MTA-STS, TLSRPT).
The Script uses also DNS over HTTP for several checks (ZoneSigned, TLSA Record for DANE).
Also some Webrequests are required for MTA-STS, TenantID (OIDC), Security.txt.
And connects via
This Script checks diffrent DNS Records about a Domain - mostly about Mailsecurity Settings.
Most of the Querys are simple DNS Querys (NS, MX, SPF, DKIM, DMARC, BIMI, MTA-STS, TLSRPT).
The Script uses also DNS over HTTP for several checks (ZoneSigned, TLSA Record for DANE).
Also some Webrequests are required for MTA-STS, TenantID (OIDC), Security.txt.
And connects via SMTP to check if the Server supports STARTTLS.

Show more

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Script -Name Get-Mailprotection -RequiredVersion 1.14

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

Free to copy, inspire, etc...

Package Details

Author(s)

  • Andres Bohren Contact: a.bohren@icewolf.ch https://twitter.com/andresbohren

Tags

DNSSEC MX Reverse Lookup STARTTLS SPF DKIM DMARC DANE MTA-STS TLSRPT BIMI CAA M365 TenantID Security.txt

Functions

Get-SPFLookupCount Invoke-STARTTLS Get-MailProtection

Dependencies

This script has no dependencies.

Release Notes

Version 1.14
- Moved from Resolve-DNS to DNS over Https (DoH) https://dns.google/resolve
- Addet Property DMARCAuthorisationRecord
- Addet Property SPFLookupCount - SPF Record Lookup check if max 10 records are used
- Fixed some Autodiscover / Lyncdiscover Bugs
- Changed Parameter -Silent and -Returnobject to Switch

FileList

Version History

Version Downloads Last updated
1.24 17 10/12/2026
1.23 146 12/10/2025
1.22 21 12/7/2025
1.21 47 9/30/2025
1.20 27 9/12/2025
1.17 62 7/23/2025
1.16 168 3/15/2025
1.15 513 11/20/2024
1.14 (current version) 61 9/28/2024
1.13 93 3/30/2024
1.12 89 1/13/2024
1.11 31 11/29/2023
1.10 24 11/8/2023
1.9 81 10/29/2023
1.8 104 9/30/2023
1.6 148 4/3/2023
1.4 154 10/8/2022
Show less