Microsoft Exchange Server
TMA-EXCHANGE-1.9
Ensure 'Maximum receive size: Connector level' is set to '25'
설명
This setting limits the size of a message a user can receive. Receive size includes the header This includes the message header, the message body, and any attachments. For internal message flow, Exchange Server uses the custom X-MS-Exchange- Organization-OriginalSize message header to record the original message size of the message as it enters the Exchange Server organization. Whenever the... Prints the number of Receive connectors whose MaxMessageSize is above 25 MB or Unlimited (expected 0). Run on each Edge Transport server. Run from an Exchange Management Shell or after `Add-PSSnapin Microsoft.Exchange.Management.PowerShell.SnapIn`; the audit loads the snap-in itself when Get-ExchangeServer is missing and fails if it cannot.
점검 방법
감사 방식: 셸 명령
$ErrorActionPreference = 'Stop'; if (-not (Get-Command Get-ExchangeServer -ErrorAction SilentlyContinue)) { Add-PSSnapin Microsoft.Exchange.Management.PowerShell.SnapIn -ErrorAction Stop }; if (-not (Get-Command Get-ExchangeServer -ErrorAction SilentlyContinue)) { throw 'Exchange Management Shell cmdlets are not available' }; $bytes = { param($s) if ("$s" -match '\(([\d,\.\s]+) bytes\)') { [int64]($matches[1] -replace '[^\d]','') } else { [int64]::MaxValue } }; $bad = @(Get-ReceiveConnector -ErrorAction Stop | Where-Object { (& $bytes $_.MaxMessageSize) -gt 25MB }); $bad.Count- 예상 출력
0
조치 방법
조치 방식: 가이드 또는 인프라 패치
Set-ReceiveConnector '<connector>' -MaxMessageSize 25MB (or for all: Get-ReceiveConnector | Set-ReceiveConnector -MaxMessageSize 25MB)
속성
- 운영 체제
- 모두
- 태그
- exchangetransport
- 참고 자료
- CIS Microsoft Exchange Server 2019 Benchmark v1.0.1 - 1.9 Ensure 'Maximum receive size: Connector level' is set to '25'
이 호스트 점검하기
감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.
tmaegis scan --target exchange