{"id":335,"date":"2012-12-01T10:01:26","date_gmt":"2012-12-01T01:01:26","guid":{"rendered":"http:\/\/www.hstech.jp\/?p=335"},"modified":"2012-12-01T10:01:26","modified_gmt":"2012-12-01T01:01:26","slug":"dkimproxy%e5%b0%8e%e5%85%a5%e8%a6%9a%e6%9b%b8-%e3%81%af%e3%81%be%e3%82%8a%e5%87%a6%e6%ba%80%e8%bc%89%e3%81%a7%e6%92%83%e6%b2%88%e5%af%b8%e5%89%8d%ef%bc%81%e3%81%9d%e3%81%ae2","status":"publish","type":"post","link":"https:\/\/www.hstech.jp\/?p=335","title":{"rendered":"DKIMproxy\u5c0e\u5165\u899a\u66f8-\u306f\u307e\u308a\u51e6\u6e80\u8f09\u3067\u6483\u6c88\u5bf8\u524d\uff01\u305d\u306e2"},"content":{"rendered":"

DKIMproxy\u30aa\u30d5\u30a3\u30b7\u30e3\u30eb\u30b5\u30a4\u30c8<\/a><\/p>\n

\u79d8\u5bc6\u9375\u30fb\u516c\u958b\u9375\u3092\u4f5c\u6210\u3057\u305f\u306e\u3067\u3001DNS\u30be\u30fc\u30f3\u30d5\u30a1\u30a4\u30eb\u3092\u7de8\u96c6\u3057\u307e\u3059\u3002<\/p>\n

\u30dd\u30ea\u30b7\u30fc\u30ec\u30b3\u30fc\u30c9\u3001\u30bb\u30ec\u30af\u30bf\u30fc\u30ec\u30b3\u30fc\u30c9\u30012\u3064\u306e\u30ec\u30b3\u30fc\u30c9\u3092\u8ffd\u52a0<\/p>\n

\u30dd\u30ea\u30b7\u30fc\u30ec\u30b3\u30fc\u30c9\u3001<\/p>\n

_policy._domainkey.hstech.\u00a0 600 IN\u00a0 TXT \"t=y; o=~; r=yoshio@hstech.net\"\nhstech._domainkey.hstech.net.\u00a0\u00a0 600 IN\u00a0 TXT \"t=y; k=rsa; p=\u516c\u958b\u9375\"<\/pre>\n
\u4e0b\u8a18\u30b5\u30a4\u30c8\u3067\u30dd\u30ea\u30b7\u30ec\u30b3\u30fc\u30c9\u306e\u30c1\u30a7\u30c3\u30af\u3092\u3057\u307e\u3059\u3002
\nhttp:\/\/domainkeys.sourceforge.net\/policycheck.html<\/a>
\n\u7d50\u679c\u306f<\/p>\n
\u00a0Testing hstech.net\nPolicy TXT=t=y;o=~;n=;r=yoshio@hstech.net;This policy record appears valid<\/span>.<\/strong><\/pre>\n
OK\u306e\u3088\u3046\u3067\u3059\u3002
\n\u6b21\u306b\u4e0b\u8a18\u30b5\u30a4\u30c8\u3067\u30bb\u30ec\u30af\u30bf\u30fc\u30ec\u30b3\u30fc\u30c9\u306e\u30c1\u30a7\u30c3\u30af\u3092\u3057\u307e\u3059\u3002
\nhttp:\/\/domainkeys.sourceforge.net\/selectorcheck.html<\/a>
\n\u7d50\u679c\u306f<\/p>\n
hstech._domainkey.hstech.net<\/strong>\nTXT Record length = 229\np=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCXxC8mmzt\/x8VFnbzPWH1dSw\/FU5qoIafLdCAqt\n\n...aP8T1NhBvthFpKQku3gcTs72xZrj0h\/I0dmzoFyI+f\/emJ7VHuFPfYIyi8dwAc+Qq2vrJmKPYey3vL4q\n\n...Im1SEyYWB4fzUdU9CynjOBeT+RziZcHIroQuQeWVXToqxuzAhaJQIDAQAB;k=rsa;t=y;\n\nThis selector is in error: Tag 'p': Invalid public key has no modulus<\/strong><\/span><\/pre>\n
\u3080\uff01\u306a\u3093\u3058\u3083\u3044\u30ce\u30fc\u30e2\u30c7\u30e5\u30e9\u30b9\u3063\u3066\uff1f\uff1f\uff1f\uff1f<\/p>\n
\u691c\u7d22\u3057\u3066\u307f\u307e\u3057\u305f\u304c\u601d\u3046\u3088\u3046\u306a\u7b54\u3048\u304c\u898b\u3064\u304b\u308a\u307e\u305b\u3093\u3002<\/p>\n
\u30aa\u30d5\u30a3\u30b7\u30e3\u30eb\u30b5\u30a4\u30c8\u306e\u6307\u793a\u901a\u308a<\/p>\n
Generate a private\/public key pair using OpenSSL:<\/p>\n
openssl genrsa -out private.key 1024\nopenssl rsa -in private.key -pubout -out public.key<\/pre>\n
\u3068\u9375\u3092\u518d\u4f5c\u6210\u3057\u3066\u3082\u7d50\u679c\u306f\u540c\u3058\u3067\u3057\u305f\u3002
\n\u3053\u3053\u30671\u65e5\u306f\u307e\u308a\u307e\u3057\u305f\u3002\u3068\u308a\u3042\u3048\u305aDKIMproxy\u3092\u52d5\u4f5c\u3055\u305b\u3066\u3001\u5410\u304b\u308c\u308b\u30a8\u30e9\u30fc\u30e1\u30c3\u30bb\u30fc\u30b8\u7b49\u304b\u3089
\n\u89e3\u6c7a\u7b56\u3092\u63a2\u308d\u3046\u3068\u601d\u3044\u3001DKIMproxy\u306e\u8a2d\u5b9a\u3092\u3059\u308b\u3053\u3068\u306b\u3057\u307e\u3057\u305f\u3002
\n\u5909\u66f4\u7b87\u6240\u306f\u592a\u5b57\u90e8\u5206\u306e\u307f<\/p>\n
\/usr\/local\/dkimproxy\/etc\/dkimproxy_in.conf\n# specify what address\/port DKIMproxy should listen on\n\nlisten\u00a0\u00a0\u00a0 127.0.0.1:10025\n\n# specify what address\/port DKIMproxy forwards mail to\n\nrelay\u00a0\u00a0\u00a0\u00a0 127.0.0.1:10026<\/pre>\n
\/usr\/local\/dkimproxy\/etc\/dkimproxy_out.conf\n\n# specify what address\/port DKIMproxy should listen on listen\u00a0\u00a0\u00a0 127.0.0.1:10027\n\n# specify what address\/port DKIMproxy forwards mail to relay\u00a0\u00a0\u00a0\u00a0 127.0.0.1:10028\n\n# specify what domains DKIMproxy can sign for (comma-separated, no spaces)\n\ndomain\u00a0\u00a0\u00a0 hstech.net,parts-recycle.net,hair-saloon.net<\/strong><\/span>\n\n# specify what signatures to add simple\n\nsignature dkim(c=relaxed,a=rsa-SHA256<\/strong><\/span>)\n\nsignature domainkeys(c=nofws,a=rsa-SHA1<\/strong><\/span>)\n\n# specify location of the private key\n\nkeyfile\u00a0\u00a0 \/usr\/local\/dkimproxy\/private.key\n\n# specify the selector (i.e. the name of the key record put in DNS)\n\nselector\u00a0 hstech<\/strong> <\/span>\n# control how many processes DKIMproxy uses\n\n#\u00a0 - more information on these options (and others) can be found by\n\n#\u00a0\u00a0\u00a0 running `perldoc Net::Server::PreFork'. #min_servers 5 #min_spare_servers 2<\/pre>\n
DKIMproxy\u306e\u89e3\u51cd\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u304b\u3089\u8d77\u52d5\u30d5\u30a1\u30a4\u30eb\u3092\/etc\/rc.d\/init.d\/\u306b\u30ea\u30cd\u30fc\u30e0\u3057\u3066\u30b3\u30d4\u30fc<\/p>\n
sample-dkim-init-script.sh\u3000\u21d2\u3000\/etc\/rc.d\/init.d\/dkimproxy<\/p>\n
\u3053\u308c\u3067DKIMproxy\u306e\u8a2d\u5b9a\u306f\u7d42\u4e86<\/p>\n
\u6b21\u306b\u4ee5\u4e0b\u306e\u30b5\u30a4\u30c8\u3092\u53c2\u7167\u3057postfix\u306emaster.cf\u3092\u5909\u66f4\u3057\u307e\u3059\u3002<\/p>\n
http:\/\/dkimproxy.sourceforge.net\/postfix-inbound-howto.html<\/a><\/p>\n
\u3053\u308c\u3067\u53d7\u3051\u53d6\u3063\u305f\u30e1\u30fc\u30eb\u306e\u691c\u8a3c\u304c\u51fa\u6765\u307e\u3059\u3002<\/p>\n
\u305f\u3081\u3057\u306bDKIM\u7f72\u540d\u3092\u3057\u3066\u3044\u308bgmail\u3068\u3057\u3066\u3044\u306a\u3044plala\u306e\u30e1\u30fc\u30eb\u306e\u30d8\u30c3\u30c0\u30fc\u3092\u6bd4\u8f03\u3057\u3066\u307f\u307e\u3059<\/p>\n
gmail\u30d8\u30c3\u30c0\u30fc\uff08\u629c\u7c8b\uff09<\/p>\n
Return-Path: <hstech99@gmail.com<\/a>>\n\nReceived: from dns2.hstech-net.com ([unix socket])\n\nby dns2.hstech-net.com (Cyrus v2.2.13p1-Invoca-RPM-2.2.13p1-4vl4) with LMTPA;\n\nFri, 30 Nov 2012 14:25:24 +0900\n\nX-Sieve: CMU Sieve 2.2\n\nReceived: from dns2.hstech-net.com (localhost [127.0.0.1])\n\nby dns2.hstech-net.com (Postfix) with ESMTP id 735426203F6\n\nfor <yoshio@hstech.net<\/a>>; Fri, 30 Nov 2012 14:25:24 +0900 (JST)\n\nAuthentication-Results: dns2.hstech-net.com; dkim=pass header.i=@gmail.com<\/span><\/a><\/strong> <\/span>\nX-DKIM-Authentication-Results: pass <\/strong><\/span>\n\nReceived: from mail-ie0-f176.google.com (mail-ie0-f176.google.com [209.85.223.176])\n\nby dns2.hstech-net.com (Postfix) with ESMTP\n\nfor <yoshio@hstech.net<\/a>>; Fri, 30 Nov 2012 14:25:24 +0900 (JST)\n\nReceived: by mail-ie0-f176.google.com with SMTP id 13so124242iea.7\n\nfor <yoshio@hstech.net<\/a>>; Thu, 29 Nov 2012 21:25:23 -0800 (PST)\n\nDKIM-Signature: \u7565<\/pre>\n
\u691c\u8a3c\u7d50\u679c\uff1dpass\u3000\u304c\u78ba\u8a8d\u3067\u304d\u307e\u3059\u3002<\/p>\n
plala\u30d8\u30c3\u30c0\u30fc\uff08\u5927\u90e8\u5206\u7565\uff09<\/p>\n
Return-Path: <hskimura@blue.plala.or.jp<\/a>>\n\nReceived: from dns2.hstech-net.com ([unix socket])\n\nby dns2.hstech-net.com (Cyrus v2.2.13p1-Invoca-RPM-2.2.13p1-4vl4) with LMTPA;\n\nSat, 01 Dec 2012 09:37:55 +0900\n\nX-Sieve: CMU Sieve 2.2\n\nReceived: from dns2.hstech-net.com (localhost [127.0.0.1])\n\nby dns2.hstech-net.com (Postfix) with ESMTP id 581816203D7\n\nfor <yoshio@hstech.net<\/a>>; Sat,\u00a0 1 Dec 2012 09:37:55 +0900 (JST)\n\nAuthentication-Results: dns2.hstech-net.com;<\/strong><\/span>\n\nX-DKIM-Authentication-Results: none<\/strong><\/span><\/pre>\n
\u3053\u308c\u3067\u53d7\u4fe1\u30e1\u30fc\u30eb\u306e\u691c\u8a3c\u78ba\u8a8d\u304c\u51fa\u6765\u307e\u3057\u305f\u3002<\/p>\n
\u6b21\u306f\u3044\u3088\u3044\u3088\u7f72\u540d\u3092\u4ed8\u3051\u308b\u8a2d\u5b9a\u3067\u3059\u3002\u3067\u3082\u307e\u3060\u307e\u3060\u5148\u306f\u9577\u3044\u304b\u3082\u30fb\u30fb\u30fb\u30fb\u30fb<\/p>\n","protected":false},"excerpt":{"rendered":"
DKIMproxy\u30aa\u30d5\u30a3\u30b7\u30e3\u30eb\u30b5\u30a4\u30c8 \u79d8\u5bc6\u9375\u30fb\u516c\u958b\u9375\u3092\u4f5c\u6210\u3057\u305f\u306e\u3067\u3001DNS\u30be\u30fc\u30f3\u30d5\u30a1\u30a4\u30eb\u3092\u7de8\u96c6\u3057\u307e\u3059\u3002 \u30dd\u30ea\u30b7\u30fc\u30ec\u30b3\u30fc\u30c9\u3001\u30bb\u30ec\u30af\u30bf\u30fc\u30ec\u30b3\u30fc\u30c9\u30012\u3064\u306e\u30ec\u30b3\u30fc\u30c9\u3092\u8ffd\u52a0 \u30dd\u30ea\u30b7\u30fc\u30ec\u30b3\u30fc\u30c9\u3001 _policy._domainkey … \u7d9a\u304d\u3092\u8aad\u3080 DKIMproxy\u5c0e\u5165\u899a\u66f8-\u306f\u307e\u308a\u51e6\u6e80\u8f09\u3067\u6483\u6c88\u5bf8\u524d\uff01\u305d\u306e2<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[30,29,21],"tags":[],"_links":{"self":[{"href":"https:\/\/www.hstech.jp\/index.php?rest_route=\/wp\/v2\/posts\/335"}],"collection":[{"href":"https:\/\/www.hstech.jp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hstech.jp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hstech.jp\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hstech.jp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=335"}],"version-history":[{"count":0,"href":"https:\/\/www.hstech.jp\/index.php?rest_route=\/wp\/v2\/posts\/335\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.hstech.jp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=335"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hstech.jp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=335"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hstech.jp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=335"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}