Recently i published a new module PSDev with the purpose to group together a set of utility functions. Most of the functions are stand-alone and can be used independently of the module. The module is published to PSGallery for ease of access.
Install-Module PSDev -Scope CurrentUser
Function: Get-Office365IPURL
The first addition to the module is the Get-Office365IPURL and Test-Office365IPURL functions. These functions simplify the process of getting a list of firewall rules for a given set of services and troubleshoot communication issues.
Get-Office365IPURL is used to get a detailed list of the rules. The Office 365 website combines, protocol, port and type of openings. This function will expand these rules based on these attributes. See the example below.
Get-Office365IPURL -Services Exchange -Types IP4,URL | Where-Object {$_.Required -eq $true}
Group Service Type Protocol Port Endpoint Required
----- ------- ---- -------- ---- -------- --------
Exchange_TCP_25_IP Exchange IP4 TCP 25 52.100.0.0/14 True
Exchange_TCP_25_IP Exchange IP4 TCP 25 104.47.0.0/17 True
Exchange_TCP_25_IP Exchange IP4 TCP 25 40.107.0.0/16 True
Exchange_TCP_25_IP Exchange IP4 TCP 25 40.92.0.0/15 True
Exchange_TCP_443_IP Exchange IP4 TCP 443 40.96.0.0/13 True
Exchange_TCP_443_IP Exchange IP4 TCP 443 204.79.197.215/32 True
Exchange_TCP_25_URL Exchange URL TCP 25 *.mail.protection.outlook.com True
...
Function: Test-Office365IPURL
Test-Office365IPURL is used to test weather a IP address is included within the ipranges provided by Microsoft. This could be useful of the firewall logs shows that a connection to an IP adress is blocked and there is a need to verify if that IP belongs to the ranges provided by Microsoft. See the example below.
Test-Office365IPURL -IP 52.109.76.22 | Where-Object {$_.ismember -eq $true} | Format-Table
RuleID ServiceArea TCPPort UDPPort Required Range Subject IsMember
------ ----------- ------- ------- -------- ----- ------- --------
46 Common 80,443 True 52.108.0.0/14 52.109.76.22 True
64 Common 443 True 52.108.0.0/14 52.109.76.22 True
65 Common 80,443 True 52.108.0.0/14 52.109.76.22 True