{"id":10524,"date":"2022-07-28T07:57:52","date_gmt":"2022-07-27T22:57:52","guid":{"rendered":"https:\/\/www.stuffy.site\/computers\/?p=10524"},"modified":"2022-07-28T08:02:51","modified_gmt":"2022-07-27T23:02:51","slug":"postfix%e3%81%abdmarc%e3%82%92%e5%b0%8e%e5%85%a5","status":"publish","type":"post","link":"https:\/\/www.stuffy.site\/computers\/archives\/10524","title":{"rendered":"Postfix\u306bDMARC\u3092\u5c0e\u5165"},"content":{"rendered":"\n<p>\u3061\u3087\u3063\u3068\u3053\u306e\u8fba\u306b\u3043\u3001DMARC\u8a2d\u5b9a\u3042\u308b\u3093\u3060\u3051\u3069\uff5e\u713c\u3044\u3066\u304b\u306a\u3044\uff5e\uff1f\u3068\u3044\u3046\u308f\u3051\u3067Postfix\u306bDMARC\u3092\u5c0e\u5165\u3057\u3066\u307f\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<!--more-->\n\n\n\n<p>\u53c2\u8003\u306b\u3057\u305f\u30b5\u30a4\u30c8\u306f <a href=\"https:\/\/www.tyksnet.com\/blog\/archives\/2593#toc4\">DMARC\u3067\u8a50\u79f0\u30e1\u30fc\u30eb\u3092\u6392\u9664\uff01\u7c21\u5358\u306a DMARC\u306e\u8a2d\u5b9a\u65b9\u6cd5 openDMARC | TanTanSun\u306e\u30d6\u30ed\u30b0<\/a><br>\u30a2\u30ea\u30b7\u30e3\u30b9\uff01<\/p>\n\n\n\n<p>yum \u3067\u884c\u304d\u307e\u3059\u3088\uff5e\u30a4\u30af\u30a4\u30af\uff01<\/p>\n\n\n<pre><span style=\"color: #0000ff; font-size: 14pt;\"># yum --enablerepo=epel install opendmarc<br>\n# vi \/etc\/opendmarc.conf<br><\/span>\n<span style=\"font-size: 14pt;\">AuthservID mail.stuffy.site\nIgnoreHosts \/etc\/opendmarc\/ignore.hosts\nSPFIgnoreResults true\nSPFSelfValidate true\nRejectFailures true\nRequiredHeaders true\nIgnoreAuthenticatedClients true<\/span><\/pre>\n\n\n<p>ignore.hosts \u30d5\u30a1\u30a4\u30eb\u3092\u65b0\u898f\u4f5c\u6210\u3057\u3066\u691c\u8a3c\u9664\u5916\u30db\u30b9\u30c8\u4e00\u89a7\u4f5c\u6210\u3057\u307e\u3059\u3002<\/p>\n\n\n<pre><span style=\"color: #0000ff; font-size: 14pt;\"># vi \/etc\/opendmarc\/ignore.hosts<br><\/span>\n<span style=\"font-size: 14pt;\">localhost\n::1\n127.0.0.0\/8\n192.168.1.0\/24<\/span><\/pre>\n\n\n<p>opendmarc\u8d77\u52d5\u3001\u81ea\u52d5\u8d77\u52d5\u8a2d\u5b9a\u3092\u6709\u52b9\u306b\u3057\u307e\u3059\u3002<\/p>\n\n\n<pre><span style=\"color:#0000ff;font-size:14pt\"># systemctl start opendmarc\n# systemctl enable opendmarc<\/span><\/pre>\n\n\n<p>\/etc\/postfix\/main.cf \u306e\u6700\u4e0b\u884c\u306bDMARC\u8a2d\u5b9a\u3092\u8ffd\u52a0\u3057\u3066postfix \u518d\u8d77\u52d5\u3057\u3066\u3001\u3069\u3046\u305e\u3002<\/p>\n\n\n<pre><span style=\"color: #0000ff; font-size: 14pt;\"># vi \/etc\/postfix\/main.cf<br><\/span>\n<span style=\"font-size: 14pt;\"># \u6700\u4e0b\u884c\u306b\u8ffd\u8a18<\/span><br>\n<span style=\"color: #0000ff; font-size: 14pt;\"># \u30b3\u2191\u30b3\u2193<\/span><span style=\"font-size: 14pt;\">\n## DMARC\nsmtpd_milters = inet:127.0.0.1:8891, inet:127.0.0.1:8893\nnon_smtpd_milters = $smtpd_milters\nmilter_default_action = tempfail<\/span><\/pre>\n<pre><span style=\"color: #0000ff; font-size: 14pt;\"># systemctl reload postfix<\/span><\/pre>\n\n\n<p>\u6700\u5f8c\u306bBIND\u306bDMARC\u30ec\u30b3\u30fc\u30c9\u3092\u767b\u9332\u3059\u308c\u3070DMARC\u5c0e\u5165\u30fb\u30fb\u30fb\u5b8c\u4e86\u3067\u3059\u3002<\/p>\n\n\n<pre><span style=\"color: #0000ff; font-size: 14pt;\">[root@ns1 ~]# cd \/var\/named\n[root@ns1 named]# vi stuffy.site.zone<br><\/span>\n<span style=\"font-size: 14pt;\">        IN      NS      ns1.stuffy.site.\n;\n        IN      MX 10   mail.stuffy.site.\n;\nmail    IN      A       116.58.163.6<br>\n<span style=\"color: #0000ff; font-size: 14pt;\"># \u30b3\u2191\u30b3\u2193<\/span>\n_dmarc.mail.stuffy.site.        IN      TXT     \"v=DMARC1; p=none; pct=100; adkim=r; aspf=r; rua=mailto:dmarc@mail.stuffy.site\"<\/span><\/pre>\n\n\n<p>p(policy) \u30aa\u30d7\u30b7\u30e7\u30f3\u306b\u306f\u3001none(\u4f55\u3082\u3057\u306a\u3044), quarantine\uff08\u691c\u75ab\u9694\u96e2\uff09, reject\uff08\u62d2\u5426\uff09\u304c\u3042\u308b\u3089\u3057\u3044\u3063\u3059\u3088\uff1f\u3000<a href=\"https:\/\/www.naritai.jp\/guidance_dmarc_example.html\">DMARC \u30ec\u30b3\u30fc\u30c9\u306e\u4f8b<\/a><\/p>\n\n\n\n<p>\u30ec\u30b3\u30fc\u30c9\u306e\u6700\u5f8c\u306b [.]\u30d4\u30ea\u30aa\u30c9\u3092\u5165\u308c\u306a\u3044\u3068\u74b0\u5883\u306b\u3088\u3063\u3066\u306f\u30b5\u30d6\u30c9\u30e1\u30a4\u30f3\u306e\u610f\u5473\u306b\u306a\u308b\u304b\u3089\u898b\u3068\u3051\u3088\uff5e\u898b\u3068\u3051\u3088\uff5e<\/p>\n\n\n\n<p><a href=\"https:\/\/qiita.com\/toshihirock\/items\/ad46e32721d1d301786b\">SPF\/DKIM\/DMARC \u306a\u3069\u306e\u30c1\u30a7\u30c3\u30af\u3092\u3059\u308b\u30b5\u30a4\u30c8<\/a> \u3067\u81ea\u5206\u306eDMARC\u30ec\u30b3\u30fc\u30c9\u304c\u30c1\u30a7\u30c3\u30af\u3067\u304d\u3066\u3001\u3044\u3044\u30be\uff5e\u3053\u308c\uff01<\/p>\n\n\n\n<p>\u30b3\u30d4\u30da\u3067\u30b9\u30df\u30de\u30bb\u30f3\u3002\u30bb\u30f3\u30bb\u30f3\u30b7\u30e3\u30eb<\/p>\n\n\n\n<p>\u53c2\u8003URL: <a href=\"https:\/\/www.tyksnet.com\/blog\/archives\/2593\">DMARC\u3067\u8a50\u79f0\u30e1\u30fc\u30eb\u3092\u6392\u9664\uff01\u7c21\u5358\u306a DMARC\u306e\u8a2d\u5b9a\u65b9\u6cd5 openDMARC | TanTanSun\u306e\u30d6\u30ed\u30b0<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/support.google.com\/a\/answer\/2466563?hl=ja\">DMARC \u30ec\u30b3\u30fc\u30c9\u306e\u8ffd\u52a0 | Google Workspace \u7ba1\u7406\u8005 \u30d8\u30eb\u30d7<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u3061\u3087\u3063\u3068\u3053\u306e\u8fba\u306b\u3043\u3001DMARC\u8a2d\u5b9a\u3042\u308b\u3093\u3060\u3051\u3069\uff5e\u713c\u3044\u3066\u304b\u306a\u3044\uff5e\uff1f\u3068\u3044\u3046\u308f\u3051\u3067Postfix\u306bDMARC\u3092\u5c0e\u5165\u3057\u3066\u307f\u307e\u3057\u305f\u3002<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,42],"tags":[],"class_list":["post-10524","post","type-post","status-publish","format-standard","hentry","category-centos7","category-postfix"],"_links":{"self":[{"href":"https:\/\/www.stuffy.site\/computers\/wp-json\/wp\/v2\/posts\/10524","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.stuffy.site\/computers\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.stuffy.site\/computers\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.stuffy.site\/computers\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.stuffy.site\/computers\/wp-json\/wp\/v2\/comments?post=10524"}],"version-history":[{"count":23,"href":"https:\/\/www.stuffy.site\/computers\/wp-json\/wp\/v2\/posts\/10524\/revisions"}],"predecessor-version":[{"id":10547,"href":"https:\/\/www.stuffy.site\/computers\/wp-json\/wp\/v2\/posts\/10524\/revisions\/10547"}],"wp:attachment":[{"href":"https:\/\/www.stuffy.site\/computers\/wp-json\/wp\/v2\/media?parent=10524"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.stuffy.site\/computers\/wp-json\/wp\/v2\/categories?post=10524"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.stuffy.site\/computers\/wp-json\/wp\/v2\/tags?post=10524"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}