SPF | 優技録

# mkdir /root/cert

# vi /root/cert/example.com.crt

// 記述


# vi /root/cert/mail1.example.com.key

// 記述

1

2

3

4

5

6

7

8

9

10

# mkdir /root/cert

# vi /root/cert/example.com.crt

// 記述

# vi /root/cert/mail1.example.com.key

// 記述

# yum install -y postfix cyrus-sasl-plain cyrus-sasl-md5 cyrus-sasl

1	# yum install -y postfix cyrus-sasl-plain cyrus-sasl-md5 cyrus-sasl

# cp /etc/postfix/main.cf /etc/postfix/main.cf.org

1	# cp /etc/postfix/main.cf /etc/postfix/main.cf.org

# vi /etc/postfix/main.cf
 
 
 
#myhostname = host.domain.tld
#myhostname = virtual.domain.tld
myhostname = mail1.example.com
 
 
 
 
#mydomain = domain.tld
mydomain = example.com
 
 
#myorigin = $myhostname
#myorigin = $mydomain
myorigin = $mydomain
 
 

#inet_interfaces = all
#inet_interfaces = $myhostname
#inet_interfaces = $myhostname, localhost
#inet_interfaces = localhost
inet_interfaces = all


#inet_protocols = all
inet_protocols = ipv4


#mynetworks = 168.100.189.0/28, 127.0.0.0/8
#mynetworks = $config_directory/mynetworks
#mynetworks = hash:/etc/postfix/network_table
mynetworks = 127.0.0.0/8 172.31.0.0/16


#smtpd_banner = $myhostname ESMTP $mail_name
#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version)
smtpd_banner = $myhostname ESMTP unknown



 
 
 
※最終行に追加



# SMTP認証
smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions = permit_sasl_authenticated, reject_unauth_destination


# TLS
smtp_use_tls = yes
smtp_tls_security_level = may
smtp_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_cert_file = /root/cert/mail1.example.com.crt
smtpd_tls_key_file  = /root/cert/mail1.example.com.key
smtpd_tls_session_cache_database = btree:/var/lib/postfix/smtpd_scache
smtpd_tls_session_cache_timeout = 3600s

# DKIM
smtpd_milters = inet:127.0.0.1:8891
non_smtpd_milters = $smtpd_milters
milter_default_action = accept

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

# vi /etc/postfix/main.cf

#myhostname = host.domain.tld

#myhostname = virtual.domain.tld

myhostname = mail1.example.com

#mydomain = domain.tld

mydomain = example.com

#myorigin = $myhostname

#myorigin = $mydomain

myorigin = $mydomain

#inet_interfaces = all

#inet_interfaces = $myhostname

#inet_interfaces = $myhostname, localhost

#inet_interfaces = localhost

inet_interfaces = all

#inet_protocols = all

inet_protocols = ipv4

#mynetworks = 168.100.189.0/28, 127.0.0.0/8

#mynetworks = $config_directory/mynetworks

#mynetworks = hash:/etc/postfix/network_table

mynetworks = 127.0.0.0/8 172.31.0.0/16

#smtpd_banner = $myhostname ESMTP $mail_name

#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version)

smtpd_banner = $myhostname ESMTP unknown

※最終行に追加

# SMTP認証

smtpd_sasl_auth_enable = yes

broken_sasl_auth_clients = yes

smtpd_recipient_restrictions = permit_sasl_authenticated, reject_unauth_destination

# TLS

smtp_use_tls = yes

smtp_tls_security_level = may

smtp_tls_loglevel = 1

smtpd_tls_received_header = yes

smtpd_tls_cert_file = /root/cert/mail1.example.com.crt

smtpd_tls_key_file = /root/cert/mail1.example.com.key

smtpd_tls_session_cache_database = btree:/var/lib/postfix/smtpd_scache

smtpd_tls_session_cache_timeout = 3600s

# DKIM

smtpd_milters = inet:127.0.0.1:8891

non_smtpd_milters = $smtpd_milters

milter_default_action = accept

優技録

タグ: SPF

メールゲートウェイのSPF+DKIM+DMARC Postfix

Postfix DKIM, SPF, 送信暗号化, 逆引き

SPF設定 DKIM 送信する為の技術