# Empfangsweg (1/2): Inbound Connector
# Generiert aus: empfangsweg-ip-whitelist.txt
# Quelle: SecuMail® Microsoft 365-Integration FAQ
#
# WICHTIG: Vor Ausfuehrung in Produktivumgebung
# bitte in einer Testumgebung validieren.
#
# Voraussetzung: Connect-ExchangeOnline

#==========================================================
# KONFIGURATION
#==========================================================

# --- Schritt 1: Inbound Connector anlegen ---
New-InboundConnector `
-Name "SecuMail Inbound" `
-ConnectorType Partner `
-SenderDomains * `
-SenderIPAddresses "212.11.224.0/24","212.11.225.0/24","212.11.240.64/27" `
-RequireTls $true `
-TlsSenderCertificateName "*.secumail.de" `
-RestrictDomainsToIPAddresses $true `
-Enabled $true

Set-InboundConnector -Identity "SecuMail Inbound" -SenderIPAddresses "212.11.224.0/24","212.11.225.0/24","212.11.240.64/27"

# --- Enhanced Filtering aktivieren ---
Set-InboundConnector "SecuMail Inbound" -EFSkipLastIP $false -EFSkipIPs "212.11.224.0/24","212.11.225.0/24","212.11.240.64/27"

# --- Zertifikats-Erkennung & S/MIME ---
Set-InboundConnector "SecuMail Inbound" -RestrictDomainsToCertificate $true -TlsSenderCertificateName "*.secumail.de"

#==========================================================
# PRUEFUNG
#==========================================================

# --- Schritt 1: Inbound Connector anlegen ---
Get-InboundConnector -Identity "SecuMail Inbound" | Format-List Name, ConnectorType, SenderIPAddresses, RequireTls, TlsSenderCertificateName, Enabled