Exchange | Kadmin

Jan 08

Сертификат для Exchange

By kadmin Exchange, WEB, Windows Server One Comment

Теперь совсем некрасиво не воспользоваться возможностью получения бесплатного доверенного сертификата SSL для почтового сервера Exchange., уже заботливо написан скрипт для получения, установки и создания задачи для автоматического обновления SSL сертификата задолго до окончания его срока.

.\wacs.exe --target manual --host mail.domain.ru,autodiscover.domain.ru --certificatestore My --installation iis,script --installationsiteid 1 --script "./Scripts/ImportExchange.ps1" --scriptparameters "'{CertThumbprint}' 'IIS,SMTP,IMAP' 1 '{CacheFile}' '{CachePassword}' '{CertFriendlyName}'"

1	.\wacs.exe --target manual --host mail.domain.ru,autodiscover.domain.ru --certificatestore My --installation iis,script --installationsiteid 1 --script "./Scripts/ImportExchange.ps1" --scriptparameters "'{CertThumbprint}' 'IIS,SMTP,IMAP' 1 '{CacheFile}' '{CachePassword}' '{CertFriendlyName}'"

Жить стало лучше, жить стало веселей

Jun 03

Deleted mailboxes to PST

By kadmin Exchange, Kadmin No Comments

Ищем удалённые ящики в одной или во всех базах

$mailboxes = Get-mailboxdatabase | Get-MailboxStatistics | where-object { $_.DisconnectDate -ne $null}
$mailboxes = Get-mailboxdatabase | Get-MailboxStatistics | where-object { $_.DisconnectDate -ne $null -and $_.DisplayName -like "Иванов*"}
$mailboxes = Get-MailboxStatistics -Database base | where-object { $_.DisconnectDate -ne $null}
$mailboxes = Get-MailboxStatistics -Database base | where-object { $_.DisconnectDate -ne $null -and $_.DisplayName -like "Иванов Иван*"}

$mailboxes = Get-mailboxdatabase | Get-MailboxStatistics | where-object { $_.DisconnectDate -ne $null}

$mailboxes = Get-mailboxdatabase | Get-MailboxStatistics | where-object { $_.DisconnectDate -ne $null -and $_.DisplayName -like "Иванов*"}

$mailboxes = Get-MailboxStatistics -Database base | where-object { $_.DisconnectDate -ne $null}

$mailboxes = Get-MailboxStatistics -Database base | where-object { $_.DisconnectDate -ne $null -and $_.DisplayName -like "Иванов Иван*"}

Создаём временных пользователей (без однофамильцев)

foreach ($mailbox in $mailboxes){ New-ADUser -Path "ou=test,dc=domain,dc=com" -Name $mailbox.displayname.split(" ")[0] -enable $True -accountPassword (ConvertTo-SecureString -AsPlainText "!!qwerty2018" -Force)}

1	foreach ($mailbox in $mailboxes){ New-ADUser -Path "ou=test,dc=domain,dc=com" -Name $mailbox.displayname.split(" ")[0] -enable $True -accountPassword (ConvertTo-SecureString -AsPlainText "!!qwerty2018" -Force)}

Подключаем ящики к пользователям

foreach ($mailbox in $mailboxes) {Connect-Mailbox -Database $mailbox.database -Identity $mailbox -User $mailbox.displayname.split(" ")[0]}

1	foreach ($mailbox in $mailboxes) {Connect-Mailbox -Database $mailbox.database -Identity $mailbox -User $mailbox.displayname.split(" ")[0]}

Сохраняем в PST

foreach ($mailbox in $mailboxes) {
$box = Get-Mailbox -Identity $mailbox.displayname.split(" ")[0]
New-MailboxExportRequest -Name $box.name -Mailbox $box -FilePath \\server\folder\$box.pst
}

foreach ($mailbox in $mailboxes) {

$box = Get-Mailbox -Identity $mailbox.displayname.split(" ")[0]

New-MailboxExportRequest -Name $box.name -Mailbox $box -FilePath \\server\folder\$box.pst

}

May 10

Exchange. Перенос адресов в контакты

By kadmin Exchange, Kadmin, PowerShell, Windows Server No Comments

Формат файла:

DN,objectClass,mail
"CN=Jon Smith,OU=staff,DC=contoso,DC=com",contact,j.smith@contoso.com

1 2	DN,objectClass,mail "CN=Jon Smith,OU=staff,DC=contoso,DC=com",contact,j.smith@contoso.com

Экспорт

csvde.exe -u -d "OU=staff,DC=contoso,dc=com" -r "(&(objectClass=user)(company=contoso))" -l "objectClass,userPrincipalName" -f contoso_contacts.csv
(cat .\contoso_contacts.csv).replace("userPrincipalName","mail") | %{$_ -replace "user", "contact"} | %{$_ -replace "OU=staff,DC=contoso,dc=com","OU=slaves,DC=gontozo,dc=com"} > .\contoso_contacts_in_gontozo.csv

csvde.exe -u -d "OU=staff,DC=contoso,dc=com" -r "(&(objectClass=user)(company=contoso))" -l "objectClass,userPrincipalName" -f contoso_contacts.csv

(cat .\contoso_contacts.csv).replace("userPrincipalName","mail") | %{$_ -replace "user", "contact"} | %{$_ -replace "OU=staff,DC=contoso,dc=com","OU=slaves,DC=gontozo,dc=com"} > .\contoso_contacts_in_gontozo.csv

Импорт

csvde -i -f contoso_contacts_in_gontozo.csv
get-contact -organizationalunit slaves -RecipientTypeDetails Contact -Filter 'WindowsEmailAddress -ne $null' |  %{ enable-mailcontact -Identity $_ -ExternalEmailAddress $_.WindowsEmailAddress.toString() }

1 2	csvde -i -f contoso_contacts_in_gontozo.csv get-contact -organizationalunit slaves -RecipientTypeDetails Contact -Filter 'WindowsEmailAddress -ne $null' \| %{ enable-mailcontact -Identity $_ -ExternalEmailAddress $_.WindowsEmailAddress.toString() }

Apr 17

Exchange. URLs

By kadmin Exchange, Kadmin No Comments

Set-ClientAccessServer -Identity mx01.contoso.com -AutodiscoverServiceInternalUri https://mail.contoso.com/autodiscover/autodiscover.xml
Set-WebServicesVirtualDirectory -Identity "mx01.contoso.com\EWS (Default Web Site)" -InternalUrl https://mail.contoso.com/ews/exchange.asmx
Set-OABVirtualDirectory -Identity "mx01.contoso.com\oab (Default Web Site)" -InternalUrl https://mail.contoso.com/oab
Set-ActiveSyncVirtualDirectory -Identity "mx01.contoso.com\Microsoft-Server-ActiveSync (Default Web Site)" -InternalUrl https://mail.contoso.com/Microsoft-Server-ActiveSync
Set-OWAVirtualDirectory -Identity "mx01.contoso.com\owa (Default Web Site)" -InternalUrl https://mail.contoso.com/owa
Set-ECPVirtualDirectory -Identity "mx01.contoso.com\ecp (Default Web Site)" -InternalUrl https://mail.contoso.com/ecp
Set-OutlookAnywhere -Identity "mx01.contoso.com\Rpc (Default Web Site)" -InternalHostname mail.contoso.com -InternalClientsRequireSsl $true

Set-ClientAccessServer -Identity mx01.contoso.com -AutodiscoverServiceInternalUri https://mail.contoso.com/autodiscover/autodiscover.xml

Set-WebServicesVirtualDirectory -Identity "mx01.contoso.com\EWS (Default Web Site)" -InternalUrl https://mail.contoso.com/ews/exchange.asmx

Set-OABVirtualDirectory -Identity "mx01.contoso.com\oab (Default Web Site)" -InternalUrl https://mail.contoso.com/oab

Set-ActiveSyncVirtualDirectory -Identity "mx01.contoso.com\Microsoft-Server-ActiveSync (Default Web Site)" -InternalUrl https://mail.contoso.com/Microsoft-Server-ActiveSync

Set-OWAVirtualDirectory -Identity "mx01.contoso.com\owa (Default Web Site)" -InternalUrl https://mail.contoso.com/owa

Set-ECPVirtualDirectory -Identity "mx01.contoso.com\ecp (Default Web Site)" -InternalUrl https://mail.contoso.com/ecp

Set-OutlookAnywhere -Identity "mx01.contoso.com\Rpc (Default Web Site)" -InternalHostname mail.contoso.com -InternalClientsRequireSsl $true

Jan 18

SpamAssassin

By kadmin CentOS, Exchange, Kadmin, Linux No Comments

yum install spamassassin
groupadd spamassassin
useradd -g spamassassin -s /bin/false -d /usr/local/spamassassin spamassassin

yum install spamassassin

groupadd spamassassin

useradd -g spamassassin -s /bin/false -d /usr/local/spamassassin spamassassin

nano /etc/mail/spamassassin/local.cf

1	nano /etc/mail/spamassassin/local.cf

nano /etc/postfix/master.cf

1	nano /etc/postfix/master.cf

smtp      inet  n       -       n       -       -       smtpd -o content_filter=spamassassin
spamassassin unix -     n       n       -       -       pipe user=spamassassin argv=/usr/bin/spamc -f -e  /usr/sbin/sendmail -oi -f ${sender} ${recipient}

1 2	smtp inet n - n - - smtpd -o content_filter=spamassassin spamassassin unix - n n - - pipe user=spamassassin argv=/usr/bin/spamc -f -e /usr/sbin/sendmail -oi -f ${sender} ${recipient}

nano /etc/postfix/main.cf

1	nano /etc/postfix/main.cf

myhostname = mail.domain.ru #SPF
mydomain = domain.ru
myorigin = $mydomain
inet_interfaces = all
transport_maps = hash:/etc/postfix/transport
relay_domains = domain.ru

myhostname = mail.domain.ru #SPF

mydomain = domain.ru

myorigin = $mydomain

inet_interfaces = all

transport_maps = hash:/etc/postfix/transport

relay_domains = domain.ru

nano /etc/postfix/transport

1	nano /etc/postfix/transport

domain.ru smtp:10.10.10.10

1	domain.ru smtp:10.10.10.10

postmap /etc/postfix/transport

1	postmap /etc/postfix/transport

systemctl enable postfix
systemctl enable spamassassin
systemctl start postfix
systemctl start spamassassin

systemctl enable postfix

systemctl enable spamassassin

systemctl start postfix

systemctl start spamassassin

spamassassin -D --lint 2 &gt; &amp;1 | grep -i failed

1	spamassassin -D --lint 2 > &1 \| grep -i failed

cpan Geo::IP 
cpan Net::Patricia
cpan Digest::SHA1
cpan Razor2::Client::Agent
cpan  Mail::SPF

cpan Geo::IP

cpan Net::Patricia

cpan Digest::SHA1

cpan Razor2::Client::Agent

cpan Mail::SPF

openssl genrsa -des3 -out mail.domain.ru.key 4096
chmod 600 mail.domain.ru.key
openssl req -new -key mail.domain.ru.key -out mail.domain.ru.csr
openssl x509 -req -days 3650 -in mail.domain.ru.csr -signkey mail.domain.ru.key -out mail.domain.ru.crt
openssl rsa -in mail.domain.ru.key -out mail.domain.ru.key.nopass
mv mail.domain.ru.key.nopass mail.domain.ru.key
openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -days 3650
chmod 600 mail.domain.ru.key
chmod 600 cakey.pem

postconf -e 'smtpd_tls_auth_only = no'
postconf -e 'smtp_use_tls = yes'
postconf -e 'smtpd_use_tls = yes'
postconf -e 'smtp_tls_note_starttls_offer = yes'
postconf -e 'smtpd_tls_key_file = /root/mail.domain.ru.key'
postconf -e 'smtpd_tls_cert_file = /root/mail.domain.ru.crt'
postconf -e 'smtpd_tls_CAfile = /root/cacert.pem'
postconf -e 'smtpd_tls_loglevel = 1'
postconf -e 'smtpd_tls_received_header = yes'
postconf -e 'smtpd_tls_session_cache_timeout = 3600s'
postconf -e 'tls_random_source = dev:/dev/urandom'

openssl genrsa -des3 -out mail.domain.ru.key 4096

chmod 600 mail.domain.ru.key

openssl req -new -key mail.domain.ru.key -out mail.domain.ru.csr

openssl x509 -req -days 3650 -in mail.domain.ru.csr -signkey mail.domain.ru.key -out mail.domain.ru.crt

openssl rsa -in mail.domain.ru.key -out mail.domain.ru.key.nopass

mv mail.domain.ru.key.nopass mail.domain.ru.key

openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -days 3650

chmod 600 mail.domain.ru.key

chmod 600 cakey.pem

postconf -e 'smtpd_tls_auth_only = no'

postconf -e 'smtp_use_tls = yes'

postconf -e 'smtpd_use_tls = yes'

postconf -e 'smtp_tls_note_starttls_offer = yes'

postconf -e 'smtpd_tls_key_file = /root/mail.domain.ru.key'

postconf -e 'smtpd_tls_cert_file = /root/mail.domain.ru.crt'

postconf -e 'smtpd_tls_CAfile = /root/cacert.pem'

postconf -e 'smtpd_tls_loglevel = 1'

postconf -e 'smtpd_tls_received_header = yes'

postconf -e 'smtpd_tls_session_cache_timeout = 3600s'

postconf -e 'tls_random_source = dev:/dev/urandom'

Dec 19

Exchange DAG

By kadmin Exchange, Kadmin, Windows Server No Comments

В одной конторе) жил сервер Exchange 2013 и был запасной сервер в запасной сети в запасном сайте, связаны сервера были между собой через VPN. Решил я добавить mailbox дабы получить успокоительный DAG. Бессмысленно было создавать отдельную сеть для репликации и добавлять вторые сетевые карты в виртуальные машины находящиеся на разных хостах в разных местах, соединенных через одну VPN. Я добавил DAG без IP адреса:

И все было было бы хорошо но при добавлении сервера в DAG я получал следующие: Read More