Get-Mailprotection

1.9

This Script checks diffrent DNS Records about a Domain - mostly about Mailsecurity Settings.
Most of the Querys are simple DNS Querys (NS, MX, SPF, DKIM, DMARC, BIMI, MTA-STS, TLS-RPT).
The Script uses also DNS over HTTP for several checks (ZoneSigned, TLSA Record for DANE).
Also some Webrequests are required for MTA-STS, TenantID (OIDC), Security.txt.
And connects vi
This Script checks diffrent DNS Records about a Domain - mostly about Mailsecurity Settings.
Most of the Querys are simple DNS Querys (NS, MX, SPF, DKIM, DMARC, BIMI, MTA-STS, TLS-RPT).
The Script uses also DNS over HTTP for several checks (ZoneSigned, TLSA Record for DANE).
Also some Webrequests are required for MTA-STS, TenantID (OIDC), Security.txt.
And connects via SMTP to check if the Server supports STARTTLS.

Show more

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Script -Name Get-Mailprotection -RequiredVersion 1.9

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

Free to copy, inspire, etc...

Package Details

Author(s)

  • Andres Bohren Contact: a.bohren@icewolf.ch https://twitter.com/andresbohren

Tags

DNSSEC MX Reverse Lookup STARTTLS SPF DKIM DMARC DANE MTA-STS TLS-RPT BIMI CAA M365 TenantID Security.txt

Functions

Invoke-STARTTLS Get-MailProtection

Dependencies

This script has no dependencies.

Release Notes

Version 1.9
- Fixed Error in Nameserver Output
- Improved SMTP Connect
- Addet SMTPBanner
- Addet SMTPCertificateIssuer
- Fixed Errorhandling in DANE and NS Lookups
- Better Errorhandling in SMTPConnect
- Fixed Autodiscover Lookup
- Fixed Lyncdiscover Lookup
- General cleanup of Code
- Added Security.txt https://securitytxt.org/
- Added -Silent Parameter

FileList

Version History

Version Downloads Last updated
1.23 78 12/10/2025
1.22 19 12/7/2025
1.21 44 9/30/2025
1.20 23 9/12/2025
1.17 58 7/23/2025
1.16 167 3/15/2025
1.15 511 11/20/2024
1.14 60 9/28/2024
1.13 91 3/30/2024
1.12 87 1/13/2024
1.11 30 11/29/2023
1.10 22 11/8/2023
1.9 (current version) 78 10/29/2023
1.8 97 9/30/2023
1.6 145 4/3/2023
1.4 153 10/8/2022
Show less