Was this page helpful?
Your feedback about this content is important. Let us know what you think.
Additional feedback?
1500 characters remaining
Export (0) Print
Expand All



Applies to: Exchange Server 2007 SP1, Exchange Server 2007 SP2, Exchange Server 2007 SP3

Topic Last Modified: 2015-03-09

Use the Get-IPBlockListEntry cmdlet to obtain information about the IP address configuration for the Connection Filter agent for the computer on which the command is run.

Get-IPBlockListEntry [-Identity <IPListEntryIdentity>] [-ResultSize <Unlimited>] [-Server <ServerIdParameter>]

Get-IPBlockListEntry -IPAddress <IPAddress> [-ResultSize <Unlimited>] [-Server <ServerIdParameter>]

The IP Block list is used by the Connection Filter agent.

To run the Get-IPBlockListEntry cmdlet, the account you use must be delegated the following:

  • Exchange View-Only Administrators role

To run the Get-IPBlockListEntry cmdlet on a computer that has the Edge Transport server role installed, you must log on by using an account that is a member of the local Administrators group on that computer.

For more information about permissions, delegating roles, and the rights that are required to administer Microsoft Exchange Server 2007, see Permission Considerations.


Parameter Required Type Description




If you want to view the IP Block list entry or entries that contain a specific IP Address, use the IPAddress parameter to specify an IP address. For example, if you have an IP Block List entry that specifies a range of IP addresses from to, enter any IP address in the IP Block List IP address range to return the IP Block list entry.




If you want to view a specific IP Block list entry, use the Identity parameter to specify the configuration number. When you add an IP address to the IP Block list, the Identity parameter is automatically incremented.




The ResultSize parameter specifies the maximum number of results to return. If you want to return all entries, use unlimited for the value of this parameter. The default value is 1000.




To specify a different Hub Transport server on which to run the Get-IPBlockListEntry cmdlet, include the Server parameter in the command. If you do not use the Server parameter, the command is run on the local server where the command is run.

You cannot use this cmdlet to configure other Edge Transport servers remotely.


Error Description


The first code example shows a Get-IPBlockListEntry command that returns machine-generated entries that are inserted by sender reputation.

The second code example shows a Get-IPBlockListEntry command that deletes machine-generated entries that expired 14 days ago.

Get-IPBlockListEntry | where { $_.IsMachineGenerated }
Get-IPBlockListEntry | where { $_.IsMachineGenerated -and $_.ExpirationTime -lt (date).AddDays(-14) } | Remove-IPBlockListEntry
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

© 2015 Microsoft