Applies to: Exchange Server 2007
Topic Last Modified: 2007-06-06

Use the Set-IPAllowListConfig cmdlet to modify the IP Allow list configuration on a computer that has the Edge Transport server role or the Hub Transport server role installed.

Syntax


`Set-IPAllowListConfig [-DomainController <Fqdn>] [-Enabled <$true \| $false>] [-ExternalMailEnabled <$true \| $false>] [-Instance <IPAllowListConfig>] [-InternalMailEnabled <$true \| $false>]`

Parameters

Parameter	Required	Type	Description
DomainController	Optional	Microsoft.Exchange.Data.Fqdn	To specify the fully qualified domain name (FQDN) of the domain controller that writes this configuration change to Active Directory directory service, include the DomainController parameter on the command. The DomainController parameter is not supported on computers that have the Edge Transport server role installed. The Edge Transport server role writes only to the local ADAM instance.
Enabled	Optional	System.Boolean	Valid input for the Enabled parameter is `$true` or `$false`. The default setting is `$true`. When the Enabled parameter is set to `$true`, connection filtering is enabled on the computer where you are running the Set-IPAllowListConfig command.
ExternalMailEnabled	Optional	System.Boolean	Valid input for the ExternalMailEnabled parameter is `$true` or `$false`. The default setting is `$true`. When the ExternalMailEnabled parameter is set to `$true`, all messages from connections outside the Exchange organization are passed through the Connection Filter agent for processing.
Instance	Optional	Microsoft.Exchange.Data.Directory.SystemConfiguration.IPAllowListConfig	The Instance parameter enables you to pass an entire object to the command to be processed. It is mainly used in scripts where an entire object needs to be passed to the command.
InternalMailEnabled	Optional	System.Boolean	Valid input for the InternalMailEnabled parameter is `$true` or `$false`. The default setting is `$false`. When the InternalMailEnabled parameter is set to `$true`, all messages from senders inside your Exchange organization are passed through the Connection Filter agent for processing. Authenticated partner messages are not considered internal mail.

Detailed Description

The IP Allow list is used by the Connection Filter agent.

To run the Set-IPAllowListConfig cmdlet, the account you use must be delegated the following:

Exchange Server Administrator role and local Administrators group for the target server

To run the Set-IPAllowListConfig cmdlet on a computer that has the Edge Transport server role installed, you must log on by using an account that is a member of the local Administrators group on that computer.

For more information about permissions, delegating roles, and the rights that are required to administer Microsoft Exchange Server 2007, see Permission Considerations.

Input Types

Return Types

Errors

Error	Description

Example

The following code example shows how to use the Set-IPAllowListConfig command to specify which domain controller writes the configuration change for the connection filtering configuration data to Active Directory.

	Copy Code
Set-IPAllowListConfig -InternalMailEnabled:$true -DomainController ad-server.example.com