{"id":217,"date":"2012-12-01T20:06:10","date_gmt":"2012-12-01T11:06:10","guid":{"rendered":"https:\/\/www.hstech.net\/?p=217"},"modified":"2019-10-08T20:06:46","modified_gmt":"2019-10-08T11:06:46","slug":"dkimproxy%e5%b0%8e%e5%85%a5%e8%a6%9a%e6%9b%b8-%e3%81%af%e3%81%be%e3%82%8a%e5%87%a6%e6%ba%80%e8%bc%89%e3%81%a7%e6%92%83%e6%b2%88%e5%af%b8%e5%89%8d%ef%bc%81%e3%81%9d%e3%81%ae2","status":"publish","type":"post","link":"https:\/\/www.hstech.net\/?p=217","title":{"rendered":"DKIMproxy\u5c0e\u5165\u899a\u66f8-\u306f\u307e\u308a\u51e6\u6e80\u8f09\u3067\u6483\u6c88\u5bf8\u524d\uff01\u305d\u306e2"},"content":{"rendered":"\n

DKIMproxy\u30aa\u30d5\u30a3\u30b7\u30e3\u30eb\u30b5\u30a4\u30c8<\/a><\/p>\n\n\n\n

\u79d8\u5bc6\u9375\u30fb\u516c\u958b\u9375\u3092\u4f5c\u6210\u3057\u305f\u306e\u3067\u3001DNS\u30be\u30fc\u30f3\u30d5\u30a1\u30a4\u30eb\u3092\u7de8\u96c6\u3057\u307e\u3059\u3002<\/p>\n\n\n\n

\u30dd\u30ea\u30b7\u30fc\u30ec\u30b3\u30fc\u30c9\u3001\u30bb\u30ec\u30af\u30bf\u30fc\u30ec\u30b3\u30fc\u30c9\u30012\u3064\u306e\u30ec\u30b3\u30fc\u30c9\u3092\u8ffd\u52a0<\/p>\n\n\n\n

\u30dd\u30ea\u30b7\u30fc\u30ec\u30b3\u30fc\u30c9\u3001<\/p>\n\n\n\n

_policy._domainkey.hstech.  600 IN  TXT \"t=y; o=~; r=yoshio@hstech.net\"\nhstech._domainkey.hstech.net.   600 IN  TXT \"t=y; k=rsa; p=\u516c\u958b\u9375\"<\/pre>\n\n\n\n
\u4e0b\u8a18\u30b5\u30a4\u30c8\u3067\u30dd\u30ea\u30b7\u30ec\u30b3\u30fc\u30c9\u306e\u30c1\u30a7\u30c3\u30af\u3092\u3057\u307e\u3059\u3002
\nhttp:\/\/domainkeys.sourceforge.net\/policycheck.html<\/a>
\n\u7d50\u679c\u306f<\/p>\n\n\n\n
 Testing hstech.net\nPolicy TXT=t=y;o=~;n=;r=yoshio@hstech.net;This policy record appears valid.<\/strong><\/pre>\n\n\n\n
OK\u306e\u3088\u3046\u3067\u3059\u3002
\n\u6b21\u306b\u4e0b\u8a18\u30b5\u30a4\u30c8\u3067\u30bb\u30ec\u30af\u30bf\u30fc\u30ec\u30b3\u30fc\u30c9\u306e\u30c1\u30a7\u30c3\u30af\u3092\u3057\u307e\u3059\u3002
\nhttp:\/\/domainkeys.sourceforge.net\/selectorcheck.html<\/a>
\n\u7d50\u679c\u306f<\/p>\n\n\n\n
hstech._domainkey.hstech.net<\/strong>\nTXT Record length = 229\np=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCXxC8mmzt\/x8VFnbzPWH1dSw\/FU5qoIafLdCAqt\n\n...aP8T1NhBvthFpKQku3gcTs72xZrj0h\/I0dmzoFyI+f\/emJ7VHuFPfYIyi8dwAc+Qq2vrJmKPYey3vL4q\n\n...Im1SEyYWB4fzUdU9CynjOBeT+RziZcHIroQuQeWVXToqxuzAhaJQIDAQAB;k=rsa;t=y;\n\nThis selector is in error: Tag 'p': Invalid public key has no modulus<\/strong><\/pre>\n\n\n\n
\u3080\uff01\u306a\u3093\u3058\u3083\u3044\u30ce\u30fc\u30e2\u30c7\u30e5\u30e9\u30b9\u3063\u3066\uff1f\uff1f\uff1f\uff1f<\/p>\n\n\n\n
\u691c\u7d22\u3057\u3066\u307f\u307e\u3057\u305f\u304c\u601d\u3046\u3088\u3046\u306a\u7b54\u3048\u304c\u898b\u3064\u304b\u308a\u307e\u305b\u3093\u3002<\/p>\n\n\n\n
\u30aa\u30d5\u30a3\u30b7\u30e3\u30eb\u30b5\u30a4\u30c8\u306e\u6307\u793a\u901a\u308a<\/p>\n\n\n\n
Generate a private\/public key pair using OpenSSL:<\/p>\n\n\n\n
openssl genrsa -out private.key 1024\nopenssl rsa -in private.key -pubout -out public.key<\/pre>\n\n\n\n
\u3068\u9375\u3092\u518d\u4f5c\u6210\u3057\u3066\u3082\u7d50\u679c\u306f\u540c\u3058\u3067\u3057\u305f\u3002
\n\u3053\u3053\u30671\u65e5\u306f\u307e\u308a\u307e\u3057\u305f\u3002\u3068\u308a\u3042\u3048\u305aDKIMproxy\u3092\u52d5\u4f5c\u3055\u305b\u3066\u3001\u5410\u304b\u308c\u308b\u30a8\u30e9\u30fc\u30e1\u30c3\u30bb\u30fc\u30b8\u7b49\u304b\u3089
\n\u89e3\u6c7a\u7b56\u3092\u63a2\u308d\u3046\u3068\u601d\u3044\u3001DKIMproxy\u306e\u8a2d\u5b9a\u3092\u3059\u308b\u3053\u3068\u306b\u3057\u307e\u3057\u305f\u3002
\n\u5909\u66f4\u7b87\u6240\u306f\u592a\u5b57\u90e8\u5206\u306e\u307f<\/p>\n\n\n\n
\/usr\/local\/dkimproxy\/etc\/dkimproxy_in.conf\n# specify what address\/port DKIMproxy should listen on\n\nlisten    127.0.0.1:10025\n\n# specify what address\/port DKIMproxy forwards mail to\n\nrelay     127.0.0.1:10026<\/pre>\n\n\n\n
\/usr\/local\/dkimproxy\/etc\/dkimproxy_out.conf\n\n# specify what address\/port DKIMproxy should listen on listen    127.0.0.1:10027\n\n# specify what address\/port DKIMproxy forwards mail to relay     127.0.0.1:10028\n\n# specify what domains DKIMproxy can sign for (comma-separated, no spaces)\n\ndomain    hstech.net,parts-recycle.net,hair-saloon.net<\/strong>\n\n# specify what signatures to add simple\n\nsignature dkim(c=relaxed,a=rsa-SHA256<\/strong>)\n\nsignature domainkeys(c=nofws,a=rsa-SHA1<\/strong>)\n\n# specify location of the private key\n\nkeyfile   \/usr\/local\/dkimproxy\/private.key\n\n# specify the selector (i.e. the name of the key record put in DNS)\n\nselector  hstech<\/strong> \n# control how many processes DKIMproxy uses\n\n#  - more information on these options (and others) can be found by\n\n#    running `perldoc Net::Server::PreFork'. #min_servers 5 #min_spare_servers 2<\/pre>\n\n\n\n
DKIMproxy\u306e\u89e3\u51cd\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u304b\u3089\u8d77\u52d5\u30d5\u30a1\u30a4\u30eb\u3092\/etc\/rc.d\/init.d\/\u306b\u30ea\u30cd\u30fc\u30e0\u3057\u3066\u30b3\u30d4\u30fc<\/p>\n\n\n\n
sample-dkim-init-script.sh\u3000\u21d2\u3000\/etc\/rc.d\/init.d\/dkimproxy<\/p>\n\n\n\n
\u3053\u308c\u3067DKIMproxy\u306e\u8a2d\u5b9a\u306f\u7d42\u4e86<\/p>\n\n\n\n
\u6b21\u306b\u4ee5\u4e0b\u306e\u30b5\u30a4\u30c8\u3092\u53c2\u7167\u3057postfix\u306emaster.cf\u3092\u5909\u66f4\u3057\u307e\u3059\u3002<\/p>\n\n\n\n
http:\/\/dkimproxy.sourceforge.net\/postfix-inbound-howto.html<\/a><\/p>\n\n\n\n
\u3053\u308c\u3067\u53d7\u3051\u53d6\u3063\u305f\u30e1\u30fc\u30eb\u306e\u691c\u8a3c\u304c\u51fa\u6765\u307e\u3059\u3002<\/p>\n\n\n\n
\u305f\u3081\u3057\u306bDKIM\u7f72\u540d\u3092\u3057\u3066\u3044\u308bgmail\u3068\u3057\u3066\u3044\u306a\u3044plala\u306e\u30e1\u30fc\u30eb\u306e\u30d8\u30c3\u30c0\u30fc\u3092\u6bd4\u8f03\u3057\u3066\u307f\u307e\u3059<\/p>\n\n\n\n
gmail\u30d8\u30c3\u30c0\u30fc\uff08\u629c\u7c8b\uff09<\/p>\n\n\n\n
Return-Path: <hstech99@gmail.com<\/a>>\n\nReceived: from dns2.hstech-net.com ([unix socket])\n\nby dns2.hstech-net.com (Cyrus v2.2.13p1-Invoca-RPM-2.2.13p1-4vl4) with LMTPA;\n\nFri, 30 Nov 2012 14:25:24 +0900\n\nX-Sieve: CMU Sieve 2.2\n\nReceived: from dns2.hstech-net.com (localhost [127.0.0.1])\n\nby dns2.hstech-net.com (Postfix) with ESMTP id 735426203F6\n\nfor <yoshio@hstech.net<\/a>>; Fri, 30 Nov 2012 14:25:24 +0900 (JST)\n\nAuthentication-Results: dns2.hstech-net.com; dkim=pass header.i=@gmail.com<\/a><\/strong> \nX-DKIM-Authentication-Results: pass <\/strong>\n\nReceived: from mail-ie0-f176.google.com (mail-ie0-f176.google.com [209.85.223.176])\n\nby dns2.hstech-net.com (Postfix) with ESMTP\n\nfor <yoshio@hstech.net<\/a>>; Fri, 30 Nov 2012 14:25:24 +0900 (JST)\n\nReceived: by mail-ie0-f176.google.com with SMTP id 13so124242iea.7\n\nfor <yoshio@hstech.net<\/a>>; Thu, 29 Nov 2012 21:25:23 -0800 (PST)\n\nDKIM-Signature: \u7565<\/pre>\n\n\n\n
\u691c\u8a3c\u7d50\u679c\uff1dpass\u3000\u304c\u78ba\u8a8d\u3067\u304d\u307e\u3059\u3002<\/p>\n\n\n\n
plala\u30d8\u30c3\u30c0\u30fc\uff08\u5927\u90e8\u5206\u7565\uff09<\/p>\n\n\n\n
Return-Path: <hskimura@blue.plala.or.jp<\/a>>\n\nReceived: from dns2.hstech-net.com ([unix socket])\n\nby dns2.hstech-net.com (Cyrus v2.2.13p1-Invoca-RPM-2.2.13p1-4vl4) with LMTPA;\n\nSat, 01 Dec 2012 09:37:55 +0900\n\nX-Sieve: CMU Sieve 2.2\n\nReceived: from dns2.hstech-net.com (localhost [127.0.0.1])\n\nby dns2.hstech-net.com (Postfix) with ESMTP id 581816203D7\n\nfor <yoshio@hstech.net<\/a>>; Sat,  1 Dec 2012 09:37:55 +0900 (JST)\n\nAuthentication-Results: dns2.hstech-net.com;<\/strong>\n\nX-DKIM-Authentication-Results: none<\/strong><\/pre>\n\n\n\n
\u3053\u308c\u3067\u53d7\u4fe1\u30e1\u30fc\u30eb\u306e\u691c\u8a3c\u78ba\u8a8d\u304c\u51fa\u6765\u307e\u3057\u305f\u3002<\/p>\n\n\n\n
\u6b21\u306f\u3044\u3088\u3044\u3088\u7f72\u540d\u3092\u4ed8\u3051\u308b\u8a2d\u5b9a\u3067\u3059\u3002\u3067\u3082\u307e\u3060\u307e\u3060\u5148\u306f\u9577\u3044\u304b\u3082\u30fb\u30fb\u30fb\u30fb\u30fb<\/p>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
DKIMproxy\u30aa\u30d5\u30a3\u30b7\u30e3\u30eb\u30b5\u30a4\u30c8 \u79d8\u5bc6\u9375\u30fb\u516c\u958b\u9375\u3092\u4f5c\u6210\u3057\u305f\u306e\u3067\u3001DNS\u30be\u30fc\u30f3\u30d5\u30a1\u30a4\u30eb\u3092\u7de8\u96c6\u3057\u307e\u3059\u3002 \u30dd\u30ea\u30b7\u30fc\u30ec\u30b3\u30fc\u30c9\u3001\u30bb\u30ec\u30af\u30bf\u30fc\u30ec\u30b3\u30fc\u30c9\u30012\u3064\u306e\u30ec\u30b3\u30fc\u30c9\u3092\u8ffd\u52a0 \u30dd\u30ea\u30b7\u30fc\u30ec\u30b3\u30fc\u30c9\u3001 _policy._domainkey […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[17,12,11],"tags":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/www.hstech.net\/index.php?rest_route=\/wp\/v2\/posts\/217"}],"collection":[{"href":"https:\/\/www.hstech.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hstech.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hstech.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hstech.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=217"}],"version-history":[{"count":1,"href":"https:\/\/www.hstech.net\/index.php?rest_route=\/wp\/v2\/posts\/217\/revisions"}],"predecessor-version":[{"id":218,"href":"https:\/\/www.hstech.net\/index.php?rest_route=\/wp\/v2\/posts\/217\/revisions\/218"}],"wp:attachment":[{"href":"https:\/\/www.hstech.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=217"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hstech.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=217"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hstech.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=217"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}