[B! qmail] hirose31ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

hirose31 id:hirose31

qmailã«é–¢ã™ã‚‹hirose31ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (8)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

qmail/netqmailã«ãŠã‘ã‚‹512ãƒã‚¤ãƒˆã‚’è¶…ãˆã‚‹DNSå¿œç”ã®ä¸é©åˆ‡ãªå–ã‚Šæ‰±ã„ã«ã¤ã„ã¦
--------------------------------------------------------------------- â– qmail/netqmailã«ãŠã‘ã‚‹512ãƒã‚¤ãƒˆã‚’è¶…ãˆã‚‹DNSå¿œç”ã®ä¸é©åˆ‡ãªå–ã‚Šæ‰±ã„ã«ã¤ã„ã¦ æ ªå¼ä¼šç¤¾æ—¥æœ¬ãƒ¬ã‚¸ã‚¹ãƒˆãƒªã‚µãƒ¼ãƒ“ã‚¹ï¼ˆJPRSï¼‰ 2011/03/03ï¼ˆThuï¼‰ --------------------------------------------------------------------- â–¼èƒŒæ™¯ ä¼çµ±çš„ãªDNSã®ä»•æ§˜ã§ã¯ã€é€šä¿¡ãƒ—ãƒãƒˆã‚³ãƒ«ã¨ã—ã¦UDPã‚’ç”¨ã„ã‚‹å ´åˆã®DNSå¿œç” ã®ã‚µã‚¤ã‚ºã‚’512ãƒã‚¤ãƒˆä»¥ä¸‹ã«åˆ¶é™ã—ã¦ã„ã¾ã™ã€‚DNSã«ãŠã„ã¦512ãƒã‚¤ãƒˆã‚’è¶…ãˆ ã‚‹å¿œç”ã‚’å–ã‚Šæ‰±ã†å¿…è¦ãŒã‚ã‚‹å ´åˆã€é€šä¿¡ãƒ—ãƒãƒˆã‚³ãƒ«ã¨ã—ã¦TCPã‚’ä½¿ç”¨ã™ã‚‹ã‹ã€ RFC 2671ã§å®šã‚ã‚‰ã‚ŒãŸæ‹¡å¼µæ©Ÿèƒ½ã§ã‚ã‚‹EDNS0ã‚’ä½¿ç”¨ã—ã¾ã™ã€‚ ãã®ã†ã¡ã€TCPã®ä½¿ç”¨ã¯å¾“æ¥ã‹ã‚‰ã‚ã‚‹DNS
hirose31 2011/03/06
qmail
ãƒªãƒ³ã‚¯
qmail ã¯ã‚ªãƒ¯ã‚³ãƒ³ - ã©ã•ã«ã£ã
2011å¹´2æœˆ1æ—¥(ç«) â– ã¡ã‚‡ã£ã¨ãƒˆã‚¤ãƒ¬ãƒƒãƒˆãƒšãƒ¼ãƒ‘ãƒ¼è²·ã„å ã‚ã¦ãã‚‹ _ ä¸€èˆ¬å‘ã‘ã®è¨˜äº‹ã‚‚å‡ºã¦ã‚‹ãã‚‰ã„ãªã‚“ã§åˆ¥ã«ã„ã¾ã•ã‚‰æ›¸ãå¿…è¦ã‚‚ãªã„æ°—ãŒã›ã‚“ã§ã‚‚ãªã„ãŒã€è‡ªåˆ†ãŒå¾Œã§æ€ã„å‡ºã—ãŸããªã£ãŸã¨ãã®ãŸã‚ã«ãƒ¡ãƒ¢ã€‚ _ ipv4 ãŒã‚ã§ãŸãå£²ã‚Šåˆ‡ã‚Œã¾ã—ãŸã€‚åŽ³å¯†ã«ã¯ã¾ã /8 ãŒ5å€‹æ®‹ã£ã¦ã‚‹ã‘ã©ã€ã“ã‚Œã¯ RIR ã«è‡ªå‹•çš„ã«åˆ†é…ã•ã‚Œã‚‹åˆ†ãªã®ã§ã€ãŠã°ã¡ã‚ƒã‚“ãŠã‹ã‚ã‚Šã€ã¨è¨€ã£ã¦ã‚‚ã”ã‚ã‚“ããƒ¼ã”ã¯ã‚“ã‚‚ã†ãªã„ã‚“ã ã‚ã€ã¨ãªã‚‹ã€‚ _ æœ€å¾Œã®ãŠã‹ã‚ã‚Šã¯ã€å¤§æ–¹ã®äºˆæƒ³ã©ãŠã‚Š APNIC ã«2ãƒ–ãƒãƒƒã‚¯ã€‚ã“ã® APNIC ã®åœ¨åº«ã‚‚å¹´å†…ã«ã¯æž¯æ¸‡ã™ã‚‹ã¯ãšã€‚ã»ã¨ã‚“ã©ä¸å›½ãŒä½¿ã£ã¡ã‚ƒã†ã®ã‹ãªãƒ¼ã€‚ _ 2003å¹´8æœˆã®è¨˜äº‹ã€‚ RIR exhaustion of the unallocated address pool would occur in 2022. 2003å¹´ã®æ™‚ç‚¹ã§ã€RIR ã®æž¯æ¸‡ãŒ2022å¹´ã®äºˆæƒ³ã€‚æ–‡ä¸ã§ã¯è¨€åŠã•ã‚Œã¦ãªã„ã‘ã©ã€
hirose31 2011/02/08
qmail
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹ã„ãã¤ã‹ã®è€ƒå¯Ÿ - qmail 1.0 ã‹ã‚‰10å¹´(Some thoughts on security after ten years of qmail 1.0)
[This is a Japanese translation of Some thoughts on security after ten years of qmail 1.0] Daniel J. Bernstein Department of Mathematics, Statistics, and Computer Science (M/C 249) University of Illinois at Chicago, Chicago, IL 606077 045, USA [email protected] CSAWâ€™07, November 2, 2007, Fairfax, Virginia, USA. Public domain. ç›®æ¬¡ æ¦‚è¦ 1. ã¯ã˜ã‚ã« 1.1 - ã€Œä»Šæœˆã®ãƒã‚°ã€å€¶æ¥½éƒ¨ 1.2 - qmail ã®ãƒªãƒªãƒ¼ã‚¹ 1.3 - qmailã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¿è¨¼ 1.4 - æœ¬
hirose31 2010/11/08
qmail

djb
ãƒªãƒ³ã‚¯
ãœã²ã¨ã‚‚ä¿®æ£ã™ã¹ã qmail ã®å•é¡Œ - ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆå´©å£Šè«–è€…ã®æ—¥è¨˜(2008-06-03)
æœ€è¿‘ã®æ—¥è¨˜ 2019-07-10 1. GMOãƒšãƒ‘ãƒœã«çµ±åˆã•ã‚ŒãŸãƒ‰ãƒ¡ã‚¤ãƒ³ãŒä¹—ã£å–ã‚Šå¯èƒ½ã ã£ãŸä»¶ 2019-02-18 1. Measures against cache poisoning attacks using IP fragmentation in DNS 2019-02-07 1. ç¬¬ä¸€ãƒ•ãƒ©ã‚°ãƒ¡ãƒ³ãƒˆä¾¿ä¹—æ”»æ’ƒã«ã¤ã„ã¦JPRSã«è³ªå•ã—ã¦ã¿ãŸ 2019-01-17 1. DNS æ¸©æ³‰ ç•ªå¤–ç·¨ (ç¬¬ä¸€ãƒ•ãƒ©ã‚°ãƒ¡ãƒ³ãƒˆä¾¿ä¹—æ”»æ’ƒã®ç†è§£ã®ãŸã‚ã«) 2019-01-16 1. æµ¸é€ã¨ã‚„ã‚‰ã‚’å¾…ã£ã¦ã„ã‚‹äººã¯ä½•ã‚’å¾…ã£ã¦ã„ã‚‹ã®ã‹? 2018-11-04 1. Unbound ã‚’å®‰å…¨ã«ã—ã‚ˆã† 2018-10-31 1. ã“ã‚Œã‚’ NSEC/NSEC3 Replacement Attack ã¨å‘¼ã¶ã®ã¯ã©ã†ã ã‚ã†? 2018-08-27 1. DNS æ¸©æ³‰ 5 ç„¡äº‹çµ‚äº† 2018-04-08 1. 8.8.8.8
hirose31 2008/06/04
ã€dns.c ä¸ã® PACKETSZ ãŒ 512 ã«ãªã‚‹ã‚ˆã†ãª OS ã‚’ä½¿ã£ã¦ã„ã‚‹ãªã‚‰ã°ã€ 4096 ä»¥ä¸Šã«ãªã‚‹ã‚ˆã†ã«ä¿®æ£ã™ã‚‹ã“ã¨ã‚’å‹§ã‚ã¾ã™ã€‚ã€‘

qmail
ãƒªãƒ³ã‚¯
ã©ã•ã«ã£ã - ãƒ‘ãƒ–ãƒªãƒƒã‚¯ãƒ‰ãƒ¡ã‚¤ãƒ³ã«ãªã£ãŸ qmail ã«ç”Ÿãã‚‹é“ã¯ã‚ã‚‹ã‹
2007å¹´12æœˆ3æ—¥(æœˆ) â– DJBã€è‡ªä½œã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã™ã¹ã¦ã‚’ãƒ‘ãƒ–ãƒªãƒƒã‚¯ãƒ‰ãƒ¡ã‚¤ãƒ³ã« _ ã¾ã‚ã€ã‚ã—ã¯ /.j ã®ã‚³ãƒ¬ã§ã¯ãªãã€Russell Nelson (netqmail ã®ä¸ã®äºº)ã® å…ˆæœˆã®ç™ºè¨€ã§çŸ¥ã£ãŸã‚ã‘ã ãŒã€‚ _ æœ¬å®¶ã‚µã‚¤ãƒˆã‚’è¦‹ã¦ã¿ã‚‹ã¨ã€Œãã®ã†ã¡ãƒ‘ãƒ–ãƒªãƒƒã‚¯ãƒ‰ãƒ¡ã‚¤ãƒ³ã«ã™ã‚‹ã‚ˆã€ã§ã¯ãªãã€ã‚‚ã†ãã†ãªã£ã¦ã‚‹ãã€‚ã€Œä¿®æ£ç‰ˆã‚’è‡ªç”±ã«é…å¸ƒã—ã¦ã„ã„ã‘ã©ã€ä¿®æ£ã‚’æŽ¨å¥¨ã—ã¦ã‚‹ã‚ã‘ã˜ã‚ƒãªã„ã€ _ ã“ã‚Œã¾ã§é ‘ã¨ã—ã¦ä¿®æ£ç‰ˆã®é…å¸ƒã‚’æ‹’å¦ã—ã¦ããŸ djb ãŒã¾ã‚‹ã£ãã‚Šæ–¹å‘è»¢æ›ã—ãŸã®ã¯ãªã‚“ã§ãªã‚“ã ã‚ã€‚obsolete ã«ãªã£ãŸã‚³ãƒ¼ãƒ‰ã ã‹ã‚‰å…¬é–‹ã™ã‚‹ã¨ã„ã†ç†ç”±ã§ã¯ãªãã€å°†æ¥ã«ã‚ãŸã£ã¦ãã†ã™ã‚‹ã¨ã„ã†ã“ã¨ãªã®ã§ã€ãªã‚“ã‹æ€ã†ã¨ã“ã‚ãŒã‚ã‚‹ã‚“ã ã¨æ€ã†ã‚“ã ã‘ã©ã€‚djb ã®ç™ºè¨€ã‚’ãœã‚“ã¶è¿½ã£ã¦ã¯ã„ãªã„ã‚“ã ã‘ã©ã€ãã®ã¸ã‚“ã«ã¤ã„ã¦è¨€åŠã¯ã‚ã‚‹ã®ã‹ã—ã‚‰ã‚“ã€‚ _ ãã†ã„ãˆã°ã€æŸãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µç®±ã®ä¸ã‚’ã®ãžã„ã¦ã¿ãŸã‚‰ã€ã‚¿ãƒ€ã§å‹æ‰‹ã«ä½¿ãˆã‚‹ã‘ã©è‡ªç”±ã§
hirose31 2007/12/05
qmail
ãƒªãƒ³ã‚¯
qmail RFC violations
qmail ã® RFC é•å é•åã—ã¦ã‚‹ã‹ã‚‰ã¨ã„ã£ã¦ã€ãã‚Œã‚’ç³¾å¼¾ã™ã‚‹ã¤ã‚‚ã‚Šã‚‚ã€ä½¿ã†ãªã¨ã„ã†ã¤ã‚‚ã‚Šã‚‚ãªã„ã—ã€qmail ä»¥å¤–ã® MTA ãŒã¾ã£ãŸãé•åã‚’ã—ã¦ã„ãªã„ã¨ã„ã†ã¤ã‚‚ã‚Šã‚‚ãªã„ã€‚ãŸã ã€ä»–ã® MTA ã¨æ¯”ã¹ã¦ã‚ã‚Šã¨ç›®ã«ã¤ãã‚„ã™ã„ã¨ã“ã‚ã§ã‚„ã£ã¦ã‚‹ã®ã§ã€ã¨ã‚Šã‚ãˆãšæ°—ãŒã¤ã„ãŸã¨ã“ã‚ã‚’ãƒ¡ãƒ¢ã—ã¦ã¿ãŸã‚‚ã®ã€‚ã•ã‚‰ã«ã€Qmail bugs and wishlist. ã¨ã„ã†ãƒšãƒ¼ã‚¸ã®æƒ…å ±ã‚‚åŠ ãˆã¦ã‚ã‚‹ã€‚èªã‚ã°ã‚ã‹ã‚‹ãŒã€qmail-pop3d ãŒã‹ãªã‚Šæ‚²æƒ¨ã€‚ ã‚ã‚“ã¾ã‚Šè©³ã—ãèª¿æŸ»ã—ã¦ã„ã‚‹ã‚ã‘ã§ã¯ãªã„ã®ã§éµœå‘‘ã¿ã«ã¯ã—ãªã„ã‚ˆã†ã«ã€‚é–“é•ã„ã‚„è¿½åŠ æƒ…å ±ãŒã‚ã‚Œã°æ•™ãˆã¦ãã ã•ã„ã€‚ qmail-send: ãƒ€ãƒ–ãƒ«ãƒã‚¦ãƒ³ã‚¹/VERP qmail-remote: 8BITMIME/ãƒãƒƒã‚¯ã‚¢ãƒƒãƒ— MX qmail-pop3d: ã‚µã‚¤ã‚º/ã‚ˆã‘ã„ãªç©ºè¡Œ/LAST/STAT qmail-send: ãƒ€ãƒ–ãƒ«ãƒã‚¦ãƒ³ã‚¹ã® envelope sen
hirose31 2006/12/12
RFC é•å qmail-pop3d: LAST ã®å¿œç”ãŒãƒ‡ã‚¿ãƒ©ãƒ¡ ã¨ã‹ã¨ã‹

qmail
ãƒªãƒ³ã‚¯
ã©ã•ã«ã£ã - RBLã¯ãƒ€ãƒ¡
2006å¹´9æœˆ1æ—¥(é‡‘) â– é›»åãƒ¡ãƒ¼ãƒ«ã®æ¤œé–²èªã‚ã‚‹ã€€ä¸å›½å¤§æ‰‹ãƒãƒ¼ã‚¿ãƒ«ã‚µã‚¤ãƒˆ _ ã ãã†ãªã€‚ä»Šã•ã‚‰è¨€ã‚ã‚Œãªãã¦ã‚‚ã‚ã‹ã£ã¦ãŸã“ã¨ã ã‘ã©ã•ã€‚ â– ç„¡é¡Œ _ å‰ã«ã‚‚æ›¸ã„ãŸã‘ã©ã•ã€ä¸–é–“ã® RBL ã£ã¦ã®ã¯ã€Œspam ãŒé€ã‚‰ã‚Œã¦ãã‚‹ IP ã‚¢ãƒ‰ãƒ¬ã‚¹ã€ã‚’ãƒªã‚¹ãƒˆã—ã¦ã‚‹ã‘ã©ã€ã€Œspam ã ã‘ã—ã‹é€ã‚‰ã‚Œã¦ã“ãªã„ IP ã‚¢ãƒ‰ãƒ¬ã‚¹ã€ã ã¨ç¢ºèªã—ã¦ã‹ã‚‰ãƒªã‚¹ãƒˆã«è¼‰ã›ã¦ã‚‹ã‚ã‘ã˜ã‚ƒãªã„ã‚“ã ã‚ˆãã€‚ã ã‹ã‚‰å…±ç”¨ã®ã‚µãƒ¼ãƒã§ä¸€éƒ¨ã®ä¸å±Šãè€…ãŒ spam ã‚’é€ã‚‹ã¨ã€åŒå±…ã™ã‚‹ç„¡å®Ÿã®äººã‹ã‚‰ã®ãƒ¡ãƒ¼ãƒ«ãŒèª¤çˆ†ã•ã‚Œã¦å±Šã‹ãªã„ã¨ã„ã†äº‹æ•…ãŒå¾Œã‚’ãŸãŸãªã„ã€‚ãƒã‚¯ã«ãƒ¡ãƒ³ãƒ†ã—ã¦ãªã‹ã£ãŸã‚Šã€/24 ã§ãƒªã‚¹ãƒˆã«ã®ã›ã‚‹é¦¬é¹¿é‡ŽéƒŽãª RBL ã‚‚å¤šã„ã—ã€‚ _ ãŸã„ã¦ã„ã® MTA ã¯ RBL ã«ã²ã£ã‹ã‹ã£ãŸã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚’è¹´ã‚‹ã“ã¨ã—ã‹ã§ããªã„ã‹ã‚‰ã“ã†ã„ã†äº‹æ•…ãŒèµ·ãã‚‹ã‚“ã ã‚ˆãã€‚è¹´ã‚‹ä»¥å¤–ã®ã‚¢ã‚¯ã‚·ãƒ§ãƒ³ã‚’å–ã‚‹ã‚ˆã†ã«ã—ã¦ã‚„ã‚Œã°èª¤çˆ†ã¯æ¸›ã‚‰ã›ã‚‹ã€‚ã¡ã†ã‚ã‘ã§ã€ postfix ç”¨ãƒ‘ãƒƒãƒä½œã£
hirose31 2006/09/09
extension addresses

Gmail

postfix

qmail
ãƒªãƒ³ã‚¯
ã€Œqmail ã‹ã‚‰ Postfix ã«ç§»è¡Œã™ã‚‹ã¨ãã®æ‹¡å¼µãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã«ã¤ã„ã¦ã€ï¼ˆ1ï¼‰ Linux Square ï¼ ï¼ IT
ï¼ IT ä¼šè°å®¤ Indexãƒªãƒ³ã‚¯ Windows Server Insider Insider.NET System Insider XML & SOA Linux Square Master of IP Network Java Solution Security & Trust Database Expert RFIDï¼‹IC ãƒªãƒƒãƒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆ & å¸³ç¥¨ Server ï¼† Storage Coding Edge ï¼ ITã‚¯ãƒ©ãƒ– Cafe VBæ¥å‹™ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºç ”ç©¶ ï¼ IT SpecialPR
hirose31 2006/09/07
qmail

postfix
ãƒªãƒ³ã‚¯
1