CONTENTS


Lastmodified 2022-08-09 (火) 17:50:32


Open DMARC

portinstall mail/opendmarc

/etc/rc.conf

opendmarc_enable="YES"
opendmarc_socketspec="/var/run/opendmarc/socket"

/usr/local/etc/mail/opendmarc.conf の編集

/usr/local/etc/mail/にサンプルファイルがあるのでコピー

## opendmarc.conf -- configuration file for OpenDMARC filter
##
## Copyright (c) 2012-2015, The Trusted Domain Project.  All rights reserved.

AutoRestart ture
BaseDirectory /var/run/opendmarc
IgnoreHosts /usr/local/etc/mail/opendmarc_ignore.hosts
IgnoreMailFrom smb.net
Socket local:/var/run/opendmarc/socket
SPFSelfValidate true
UMask 002

IgnoreHostsの編集

/usr/local/etc/mail/opendmarc_ignore.hosts

localhost
::1
2001:db8::/32
127.0.0.0/8
192.168.1.0/24

postfixの設定変更

/usr/local/etc/postfix/main.cf

3行目のみ追加

# mail filter
smtpd_milters = 
	unix:/var/run/milteropendkim/socket
	unix:/var/run/opendmarc/socket               ← この行
non_smtpd_milters = $smtpd_milters
milter_default_action = accept

policyd-spf設定削除

今回、opendmarcのspf評価を使用するためpolicyd-spfの設定を削除する。

/usr/local/etc/postfix/main.cf

# policyd-spf
#policyd-spf_time_limit = 3600
#       check_policy_service unix:private/policyd-spf

/usr/local/etc/postfix/master.cf

#policyd-spf  unix  -    n       n       -       0       spawn
#   user=nobody argv=/usr/local/bin/policyd-spf

DNSにTXTレコード追加

/usr/local/etc/namedb/master/smb.net.zone

_dmarc          IN TXT "v=DMARC1; p=none; sp=none; ri=3600;
rua=mailto:postmaster@smb.net;   ruf=mailto:postmaster@smb.net"

起動

# service opendmarc start
Starting opendmarc.
# service postfix restart
postfix/postfix-script: stopping the Postfix mail system
postfix/postfix-script: starting the Postfix mail system

Total access 527:本日 1:昨日 1

Counter: 527, today: 1, yesterday: 1

トップ   新規 一覧 検索 最終更新   ヘルプ   最終更新のRSS