{"id":572,"date":"2025-04-18T08:06:37","date_gmt":"2025-04-17T23:06:37","guid":{"rendered":"https:\/\/www.lapidem.pw\/wordpress\/?p=572"},"modified":"2025-10-26T15:42:10","modified_gmt":"2025-10-26T06:42:10","slug":"postfix","status":"publish","type":"post","link":"https:\/\/www.lapidem.pw\/wordpress\/?p=572","title":{"rendered":"postfix"},"content":{"rendered":"\n
sudo adduser info\nsudo -u info nano \/home\/info\/.forward\nsudo chown info:info \/home\/info\/.forward\nsudo chmod 600 \/home\/info\/.forward\nsudo systemctl restart postfix\n\n<\/code><\/pre>\n\n\n\n
SRS\u5316<\/h2>\n\n\n\n
\u5916\u90e8\u304b\u3089\u5c4a\u3044\u305f\u30e1\u30fc\u30eb\uff08\u4f8b\uff1asomeone@gmail.com \u2192 info@some.domain\uff09\u3092\nPostfix\u304c .forward \u3067 info@another.domain \u306b\u8ee2\u9001\u3059\u308b\u969b\u306b\u3001\nSPF\u3092\u901a\u3059\u305f\u3081\u306b\u300cEnvelope From\uff08Return-Path\uff09\u300d\u3092\u66f8\u304d\u63db\u3048\u308b\uff08SRS\u5316\uff09\u8a2d\u5b9a\u3092\u884c\u3046\u3002<\/code><\/pre>\n\n\n\n
sudo apt update\nsudo apt install postsrsd\nsudo systemctl enable postsrsd\nsudo systemctl start postsrsd\nsudo systemctl status postsrsd\n<\/code><\/pre>\n\n\n\n
SPF\u8a2d\u5b9a\uff08DNS\u5074\uff09<\/h2>\n\n\n\n
TXT  some.domain  \"v=spf1 a mx ~all\"\nA\tmail.some.domain\t3600\tx.x.x.x\n\u6700\u5f8c\u306e'.'\u306f\u5fc5\u9808<\/code><\/pre>\n\n\n\n
# Google\u306eDNS\u3092\u4f7f\u3063\u3066\u78ba\u8a8d\ndig MX some.domain @8.8.8.8 +short\ndig A mail.some.domain @8.8.8.8 +short<\/code><\/pre>\n\n\n\n
\/etc\/postfix\/main.cf<\/p>\n\n\n\n
# =============================================
# \u57fa\u672c\u8a2d\u5b9a
# =============================================
# \u30db\u30b9\u30c8\u540d\u30fb\u30c9\u30e1\u30a4\u30f3\u8a2d\u5b9a
myhostname = mail.some.domain<\/mark>
mydomain = some.domain<\/mark>
myorigin = $mydomain

# \u30ed\u30fc\u30ab\u30eb\u914d\u9001\u5bfe\u8c61\u30c9\u30e1\u30a4\u30f3
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain

# \u30ea\u30b9\u30f3\u8a2d\u5b9a
inet_interfaces = all
inet_protocols = all

# \u30e1\u30fc\u30eb\u30dc\u30c3\u30af\u30b9\u5f62\u5f0f (Maildir\u63a8\u5968)
home_mailbox = Maildir\/

# =============================================
# \u4e2d\u7d99\u8a2d\u5b9a\uff08\u5916\u90e8\u8ee2\u9001\u8a31\u53ef\uff09
# =============================================
# \u5185\u90e8\u304b\u3089\u306e\u4e2d\u7d99\u8a31\u53ef\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\uff08\u5fc5\u8981\u306b\u5fdc\u3058\u3066\u8abf\u6574\uff09
mynetworks = 127.0.0.0\/8 [::1]\/128

# \u5916\u90e8\u4e2d\u7d99\u306f\u62d2\u5426
relay_domains =

# =============================================
# \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u8a8d\u8a3c\u95a2\u9023
# =============================================
# \u4e0d\u6b63\u4e2d\u7d99\u3092\u9632\u6b62
smtpd_recipient_restrictions =
    permit_mynetworks,
    reject_unauth_destination

# TLS\u901a\u4fe1\u3092\u6709\u52b9\u5316\uff08\u8a3c\u660e\u66f8\u3092\u5c0e\u5165\u6e08\u307f\u306a\u3089\uff09
smtp_use_tls = yes
smtpd_use_tls = yes
smtpd_tls_cert_file = \/etc\/ssl\/certs\/ssl-cert-snakeoil.pem
smtpd_tls_key_file  = \/etc\/ssl\/private\/ssl-cert-snakeoil.key
smtpd_tls_security_level = may
smtp_tls_security_level  = may
smtpd_tls_loglevel = 1

# =============================================
# SRS\u8a2d\u5b9a\uff08\u8ee2\u9001\u6642\u306eSPF\u30a8\u30e9\u30fc\u56de\u907f\uff09
# =============================================
sender_canonical_classes = envelope_sender
sender_canonical_maps = tcp:127.0.0.1:10001
recipient_canonical_classes = envelope_recipient
recipient_canonical_maps = tcp:127.0.0.1:10002

# =============================================
# \u30ed\u30b0\u8a73\u7d30\u8a2d\u5b9a\uff08\u30c8\u30e9\u30d6\u30eb\u89e3\u6790\u7528\uff09
# =============================================
debug_peer_level = 2
smtpd_tls_received_header = yes
smtp_tls_note_starttls_offer = yes

# =============================================
# \u305d\u306e\u4ed6\u306e\u63a8\u5968\u8a2d\u5b9a
# =============================================
# \u30db\u30b9\u30c8\u540d\u304c\u6b63\u5f15\u304d\u30fb\u9006\u5f15\u304d\u53ef\u80fd\u3067\u3042\u308b\u3053\u3068
# \u5fc5\u8981\u306b\u5fdc\u3058\u3066 hostname \u30b3\u30de\u30f3\u30c9\u3067\u78ba\u8a8d
#
# \u30e1\u30fc\u30eb\u30ad\u30e5\u30fc\u3092\u77ed\u6642\u9593\u3067\u518d\u8a66\u884c
maximal_queue_lifetime = 2d
bounce_queue_lifetime = 2d

# \u30e1\u30c3\u30bb\u30fc\u30b8\u30b5\u30a4\u30ba\u4e0a\u9650 (\u4f8b: 50MB)
message_size_limit = 52428800
mailbox_size_limit = 2147483648


<\/code><\/pre>\n\n\n\n
apt -y install mailutils<\/p>\n\n\n\n
*info@FDQN\u306e\u4f8b<\/p>\n\n\n\n
\tadduser info\n\tpasswd info\n\tsu - info\n\t\/etc\/aliases\n\t\t#info: postmaster\n\t\tSudo newaliases\n\t.forward\n\t\thogehoge@some.domain\n\n\tvi \/etc\/aliases\n\t\t#info: postmaster\nSudo newaliases\n<\/code><\/pre>\n\n\n\n
<\/pre>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
SRS\u5316 SPF\u8a2d\u5b9a\uff08DNS\u5074\uff09 \/etc\/postfix\/main.cf apt -y insta …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8,2],"tags":[],"class_list":["post-572","post","type-post","status-publish","format-standard","hentry","category-debian-linux","category-linux"],"_links":{"self":[{"href":"https:\/\/www.lapidem.pw\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/572","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.lapidem.pw\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.lapidem.pw\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.lapidem.pw\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lapidem.pw\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=572"}],"version-history":[{"count":13,"href":"https:\/\/www.lapidem.pw\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/572\/revisions"}],"predecessor-version":[{"id":812,"href":"https:\/\/www.lapidem.pw\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/572\/revisions\/812"}],"wp:attachment":[{"href":"https:\/\/www.lapidem.pw\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=572"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.lapidem.pw\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=572"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.lapidem.pw\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=572"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}