ã¡ãŒã«ã®ãªãããŸãé²æ¢ã«å¹æçãªãSPFãã«ã€ããŠãåå¿è åãã«è§£èª¬ããŸããSPFã¯éä¿¡ãã¡ã€ã³èªèšŒæè¡ã®äžã€ã§ãæ£èŠã®IPã¢ãã¬ã¹ããã¡ãŒã«ãéä¿¡ãããããæ€èšŒããŸããè¿å¹Žããã£ãã·ã³ã°è©æ¬ºãã¹ãã ã¡ãŒã«ãå¢å ããã¡ãŒã«ã®ãªãããŸãã倧ããªåé¡ãšãªã£ãŠããŸããSPFãå°å ¥ããããšã§ããã®ãããªè åšã軜æžã§ããŸããSPFã®ä»çµã¿ã¯ããã¡ã€ã³ææè ãæ£åœãªã¡ãŒã«éä¿¡å ã®IPã¢ãã¬ã¹ãDNSã«SPFã¬ã³ãŒããšããŠèšå®ããåä¿¡åŽããããåç §ããŠéä¿¡å ã®æ£åœæ§ãæ€èšŒãããšãããã®ã§ãããã ããSPFã«ãéçããããéä¿¡å ã¡ãŒã«ã¢ãã¬ã¹ã®è©ç§°ãå®å šã«é²ãããšã¯ã§ããŸããããã®ãããDKIMãDMARCãªã©ã®ä»ã®èªèšŒæè¡ãšçµã¿åãããããšãæšå¥šãããŠããŸãã
SPFãšã¯äœã
SPFïŒSender Policy FrameworkïŒãšã¯ãã¡ãŒã«ã®éä¿¡å ãæ£èŠã®ãã®ã§ããããæ€èšŒããããã®æè¡ã§ããã¡ãŒã«ã®ãªãããŸãé²æ¢ãç®çãšããŠãéä¿¡å ãã¡ã€ã³ã®ææè ãèªèº«ã®ãã¡ã€ã³ããã¡ãŒã«ãéä¿¡ããéã«äœ¿çšããIPã¢ãã¬ã¹ãæå®ããããšã§ãåä¿¡åŽããã®IPã¢ãã¬ã¹ä»¥å€ããã®ã¡ãŒã«ãæåŠã§ããããã«ããŸãã
SPFã®å®çŸ©ãšæŠèŠ
SPFã¯ãéä¿¡å ã¡ãŒã«ãµãŒããŒã®IPã¢ãã¬ã¹ãããã®ãã¡ã€ã³ã®ææè ã«ãã£ãŠæ¿èªããããã®ã§ããããæ€èšŒããããã®DNSã¬ã³ãŒãã§ãããã¡ã€ã³ææè ã¯ãèªèº«ã®ãã¡ã€ã³ã«å¯ŸããŠSPFã¬ã³ãŒããèšå®ããæ£åœãªã¡ãŒã«éä¿¡å ã®IPã¢ãã¬ã¹ãæå®ããŸããåä¿¡åŽã®ã¡ãŒã«ãµãŒããŒã¯ãåä¿¡ããã¡ãŒã«ã®éä¿¡å IPã¢ãã¬ã¹ãšSPFã¬ã³ãŒããç §åããäžèŽããªãå Žåã¯ãã®ã¡ãŒã«ãæåŠããããã¹ãã æ±ãã«ãããããããšãã§ããŸãã
SPFãå¿ èŠãšãããèæ¯
è¿å¹Žããã£ãã·ã³ã°è©æ¬ºãã¹ãã ã¡ãŒã«ãå¢å ããŠãããã¡ãŒã«ã®ãªãããŸãã倧ããªåé¡ãšãªã£ãŠããŸããæªæã®ãã第äžè ããä¿¡é Œã§ããçµç¹ãå人ã«ãªãããŸããŠäžæ£ãªã¡ãŒã«ãéä¿¡ããããšã§ãæ©å¯æ å ±ã®çé£ãééçæ倱ã«ã€ãªããå¯èœæ§ããããŸããSPFã¯ããã®ãããªã¡ãŒã«ã®ãªãããŸããé²ãããã«éçºãããæè¡ã®äžã€ã§ããéä¿¡å ã®æ£åœæ§ãæ€èšŒããããšã§ãåä¿¡è ã¯å®å¿ããŠã¡ãŒã«ãåãåãããšãã§ããŸãã
SPFã®ä»çµã¿ãšåäœåç
SPFã®ä»çµã¿ã¯ä»¥äžã®æé ã§åäœããŸãã
- ãã¡ã€ã³ææè ããèªèº«ã®ãã¡ã€ã³ã®DNSã«SPFã¬ã³ãŒããèšå®ããæ£åœãªã¡ãŒã«éä¿¡å ã®IPã¢ãã¬ã¹ãæå®ããã
- éä¿¡è ãã¡ãŒã«ãéä¿¡ããéãéä¿¡å ã¡ãŒã«ãµãŒããŒã®IPã¢ãã¬ã¹ãä»å ãããã
- åä¿¡åŽã®ã¡ãŒã«ãµãŒããŒã¯ãåä¿¡ããã¡ãŒã«ã®EnvelopeFromãã¡ã€ã³ïŒMAIL FROMïŒã«å¯Ÿå¿ããSPFã¬ã³ãŒããåç §ããã
- åä¿¡åŽã®ã¡ãŒã«ãµãŒããŒã¯ãéä¿¡å IPã¢ãã¬ã¹ãšSPFã¬ã³ãŒãã«æå®ãããIPã¢ãã¬ã¹ãæ¯èŒããã
- äžèŽããå Žåãã¡ãŒã«ã¯æ£åœãªãã®ãšã¿ãªãããéåžžã®åŠçãè¡ããããäžèŽããªãå Žåãã¡ãŒã«ã¯æåŠãããããã¹ãã æ±ããããå¯èœæ§ãããã
SPFã¬ã³ãŒãã«ã¯ã以äžã®ãããªã¡ã«ããºã ãçšããããŸãã
ã¡ã«ããºã | 説æ |
---|---|
IP4 | æå®ããIPv4ã¢ãã¬ã¹ãŸãã¯ã¢ãã¬ã¹ç¯å²ããã®ã¡ãŒã«ãèš±å¯ããã |
IP6 | æå®ããIPv6ã¢ãã¬ã¹ãŸãã¯ã¢ãã¬ã¹ç¯å²ããã®ã¡ãŒã«ãèš±å¯ããã |
A | æå®ãããã¡ã€ã³ã®Aã¬ã³ãŒãïŒIPv4ïŒã«å¯Ÿå¿ããIPã¢ãã¬ã¹ããã®ã¡ãŒã«ãèš±å¯ããã |
MX | æå®ãããã¡ã€ã³ã®MXã¬ã³ãŒãã«å¯Ÿå¿ããIPã¢ãã¬ã¹ããã®ã¡ãŒã«ãèš±å¯ããã |
INCLUDE | æå®ããå€éšãã¡ã€ã³ã®SPFã¬ã³ãŒããåç §ãããã®çµæãåãå ¥ããã |
ãããã®ã¡ã«ããºã ãçµã¿åãããããšã§ãæè»ãã€è©³çŽ°ãªSPFã¬ã³ãŒããèšå®ã§ããŸããé©åã«èšå®ãããSPFã¬ã³ãŒãã¯ãã¡ãŒã«ã®ãªãããŸãé²æ¢ã«å€§ããè²¢ç®ããåä¿¡è ã®ä¿¡é Œæ§ãé«ããããšãã§ããŸãã
ãã ããSPFã¯ã¡ãŒã«ã®éä¿¡å IPã¢ãã¬ã¹ã®ã¿ãæ€èšŒãããããéä¿¡å ã¡ãŒã«ã¢ãã¬ã¹ã®è©ç§°ãå®å šã«é²ãããšã¯ã§ããŸããããã®ãããSPFãšäœµããŠDKIMãDMARCãªã©ã®ä»ã®èªèšŒæè¡ãå°å ¥ããããšãæšå¥šãããŠããŸãããããã®æè¡ãçµã¿åãããããšã§ãããå æ¬çãªã¡ãŒã«ã»ãã¥ãªãã£ãå®çŸã§ããŸãã
ãŸããSPFã¬ã³ãŒãã®èšå®ã«éããŠã¯ãèªçµç¹ã®ã¡ãŒã«é ä¿¡ã·ã¹ãã ãååã«ç解ããæ£åœãªéä¿¡å IPã¢ãã¬ã¹ãæŒããªãæå®ããå¿ èŠããããŸããSPFã¬ã³ãŒãã®èšå®ãã¹ã¯ãæ£åœãªã¡ãŒã«ãæåŠããããªã©ã®åé¡ãåŒãèµ·ããå¯èœæ§ãããããã泚æãå¿ èŠã§ãã
SPFã¯ãã¡ãŒã«ã»ãã¥ãªãã£ã®éèŠãªèŠçŽ ã®äžã€ã§ãããçµç¹ãå人ãã¡ãŒã«ã®ãªãããŸãé²æ¢ã«åãçµãããã®åºç€ãšãªãæè¡ã§ããé©åã«å®è£ ã»ç®¡çãããSPFã¯ãã¡ãŒã«ã³ãã¥ãã±ãŒã·ã§ã³ã®ä¿¡é Œæ§ãé«ãããã£ãã·ã³ã°è©æ¬ºãã¹ãã ã¡ãŒã«ã®ãªã¹ã¯ã軜æžããã®ã«åœ¹ç«ã¡ãŸãã
SPFã®èšå®æ¹æ³
SPFãæ£ããèšå®ããããšã¯ãã¡ãŒã«ã®ãªãããŸãé²æ¢ãšéä¿¡å ã®ä¿¡é Œæ§ãé«ããããã«éèŠã§ããããã§ã¯ãSPFã¬ã³ãŒãã®äœææé ãæžåŒãšæ§æãèšå®äŸãšæ³šæç¹ã«ã€ããŠè§£èª¬ããŸãã
SPFã¬ã³ãŒãã®äœææé
- èªçµç¹ã®ã¡ãŒã«é ä¿¡ã·ã¹ãã ãææ¡ããæ£åœãªã¡ãŒã«éä¿¡å ã®IPã¢ãã¬ã¹ãç¹å®ããã
- ç¹å®ããIPã¢ãã¬ã¹ãåºã«ãSPFã¬ã³ãŒãã®æ§æã«åŸã£ãŠã¬ã³ãŒããäœæããã
- äœæããSPFã¬ã³ãŒãããDNSãµãŒããŒäžã®ãã¡ã€ã³ã®TXTã¬ã³ãŒããšããŠèšå®ããã
- SPFã¬ã³ãŒãã®èšå®ãæ£ããããšããSPFã¬ã³ãŒãæ€èšŒããŒã«ãçšããŠç¢ºèªããã
- å¿ èŠã«å¿ããŠãSPFã¬ã³ãŒããæŽæ°ã»ä¿®æ£ããã
SPFã¬ã³ãŒãã®æžåŒãšæ§æ
SPFã¬ã³ãŒãã¯ã以äžã®æžåŒã«åŸã£ãŠäœæããŸãã
v=spf1 [ã¡ã«ããºã ] [修食å] -all
ã¡ã«ããºã ã«ã¯ãIP4ãIP6ãAãMXãINCLUDEãªã©ããããæ£åœãªã¡ãŒã«éä¿¡å ãæå®ããŸãã修食åã«ã¯ã+ïŒPassïŒã-ïŒFailïŒã~ïŒSoftFailïŒã?ïŒNeutralïŒããããã¡ã«ããºã ã®çµæã«å¯Ÿããè©äŸ¡æ¹æ³ã瀺ããŸãã-allã¯ãæ瀺çã«æå®ãããŠããªãIPã¢ãã¬ã¹ããã®ã¡ãŒã«ãæåŠããããšãæå³ããŸãã
äŸïŒv=spf1 ip4:192.0.2.0/24 ip6:2001:db8::/32 a:example.com include:thirdparty.com -all
SPFã¬ã³ãŒãã®èšå®äŸãšæ³šæç¹
以äžã¯ãSPFã¬ã³ãŒãã®èšå®äŸã§ãã
v=spf1 a mx -all
ïŒãã¡ã€ã³ã®Aã¬ã³ãŒããšMXã¬ã³ãŒãã«å¯Ÿå¿ããIPã¢ãã¬ã¹ããã®ã¡ãŒã«ãèš±å¯ãããã以å€ã¯æåŠãv=spf1 ip4:192.0.2.0/24 ~all
ïŒ192.0.2.0/24ã®IPã¢ãã¬ã¹ç¯å²ããã®ã¡ãŒã«ãèš±å¯ãããã以å€ã¯SoftFailïŒäžç«çã«è©äŸ¡ïŒãv=spf1 include:thirdparty.com -all
ïŒthirdparty.comã®SPFã¬ã³ãŒããåç §ãããã以å€ã®IPã¢ãã¬ã¹ããã®ã¡ãŒã«ãæåŠã
SPFã¬ã³ãŒããèšå®ããéã¯ã以äžã®ç¹ã«æ³šæãå¿ èŠã§ãã
- æ£åœãªã¡ãŒã«éä¿¡å ã®IPã¢ãã¬ã¹ãæŒããªãæå®ããã
- å€éšã®ã¡ãŒã«é ä¿¡ãµãŒãã¹ãå©çšããŠããå Žåããã®ãµãŒãã¹ã®SPFã¬ã³ãŒããINCLUDEããã
- SPFã¬ã³ãŒãã®è©äŸ¡çµæããFailããšãªãIPã¢ãã¬ã¹ããã®ã¡ãŒã«ã¯ãåä¿¡åŽã§æåŠãããå¯èœæ§ãé«ããããèšå®ã«ã¯ååãªæ³šæãæãã
- SPFã¬ã³ãŒãã®æåæ°ã¯255æå以å ã«åããå¿ èŠãããã
- SPFã¬ã³ãŒããå€æŽããå ŽåãDNSã®æµžéã«æéããããããšãèæ ®ããã
é©åã«èšå®ãããSPFã¬ã³ãŒãã¯ãã¡ãŒã«ã®ãªãããŸãé²æ¢ãšéä¿¡å ã®ä¿¡é Œæ§åäžã«å€§ããè²¢ç®ããŸãããã ããSPFã¯ã¡ãŒã«ã®éä¿¡å IPã¢ãã¬ã¹ã®ã¿ãæ€èšŒãããããéä¿¡å ã¡ãŒã«ã¢ãã¬ã¹ã®è©ç§°ãå®å šã«é²ãããšã¯ã§ããŸããããã®ãããSPFãšäœµããŠä»ã®èªèšŒæè¡ïŒDKIMãDMARCãªã©ïŒãå°å ¥ããããšãæšå¥šãããŠããŸãã
çµç¹ã®ã¡ãŒã«é ä¿¡ã·ã¹ãã ã«åãããŠãSPFã¬ã³ãŒããé©åã«èšå®ã»ç®¡çããããšããã¡ãŒã«ã»ãã¥ãªãã£ã®ç¢ºä¿ã«äžå¯æ¬ ã§ããå®æçã«SPFã¬ã³ãŒããèŠçŽããå¿ èŠã«å¿ããŠæŽæ°ããããšã§ãåžžã«æé©ãªç¶æ ãç¶æããŸãããã
SPFã®å¹æãšéç
SPFïŒSender Policy FrameworkïŒã¯ãã¡ãŒã«ã®ãªãããŸãé²æ¢ã«äžå®ã®å¹æãçºæ®ããŸãããäžèœã§ã¯ãããŸãããããã§ã¯ãSPFã«ãããã£ãã·ã³ã°å¯Ÿçã®æå¹æ§ãSPFã ãã§ã¯é²ããªãè åšããããŠSPFãšä»ã®èªèšŒæè¡ã®çµã¿åããã«ã€ããŠè§£èª¬ããŸãã
SPFã«ãããã£ãã·ã³ã°å¯Ÿçã®æå¹æ§
SPFã¯ãã¡ãŒã«ã®éä¿¡å IPã¢ãã¬ã¹ãæ£åœãªãã®ã§ããããæ€èšŒããããšã§ããªãããŸãã¡ãŒã«ã®éä¿¡ãå°é£ã«ããŸããããã«ããããã£ãã·ã³ã°è©æ¬ºã®æå£ã®äžã€ã§ãããªãããŸãã¡ãŒã«ã®ãªã¹ã¯ã軜æžã§ããŸããSPFãå°å ¥ããããšã§ãçµç¹ã®ä¿¡é Œæ§ãé«ããã¡ãŒã«åä¿¡è ã®å®å¿æãæäŸããããšãã§ããŸãã
ãŸããSPFã¬ã³ãŒããå ¬éããããšã§ãä»ã®ãã¡ã€ã³ææè ãèªçµç¹ã®ãã¡ã€ã³ãè©ç§°ããŠæªçšããããšãé²ãããšãã§ããŸããããã¯ãèªçµç¹ã®è©å€ãå®ãããã«ãéèŠãªåœ¹å²ãæãããŸãã
SPFã ãã§ã¯é²ããªãè åš
ããããSPFã«ã¯éçããããŸããSPFã¯ãã¡ãŒã«ã®éä¿¡å IPã¢ãã¬ã¹ã®ã¿ãæ€èšŒãããããéä¿¡å ã¡ãŒã«ã¢ãã¬ã¹ã®è©ç§°ãå®å šã«é²ãããšã¯ã§ããŸãããæ»æè ãæ£åœãªIPã¢ãã¬ã¹ãå©çšããŠãªãããŸãã¡ãŒã«ãéä¿¡ããå ŽåãSPFã§ã¯ãããæ€ç¥ã§ããŸããã
ãŸããSPFã¯ãã¡ãŒã«ã®å 容ãæ·»ä»ãã¡ã€ã«ã®å®å šæ§ãä¿èšŒãããã®ã§ã¯ãããŸããããã£ãã·ã³ã°è©æ¬ºããã«ãŠã§ã¢ã®é åžãªã©ãã¡ãŒã«ã®å 容ã«é¢ããè åšã«å¯ŸããŠã¯ãå¥ã®å¯Ÿçãå¿ èŠã§ãã
SPFãšä»ã®èªèšŒæè¡ã®çµã¿åãã
SPFã®éçãè£ãããã«ãä»ã®èªèšŒæè¡ãšçµã¿åãããããšãæšå¥šãããŠããŸãã代衚çãªæè¡ãšããŠãDKIMãšDMARCããããŸãã
DKIMïŒDomainKeys Identified MailïŒã¯ãã¡ãŒã«ã®éä¿¡å ãã¡ã€ã³ãèªèšŒããã¡ãŒã«ã®å 容ãéä¿¡éäžã§æ¹ãããããŠããªãããšãä¿èšŒããŸããDKIMãå°å ¥ããããšã§ãã¡ãŒã«ã®ä¿¡é Œæ§ãããã«é«ããããšãã§ããŸãã
DMARCïŒDomain-based Message Authentication, Reporting, and ConformanceïŒã¯ãSPFãšDKIMã®èªèšŒçµæã«åºã¥ããŠããªãããŸãã¡ãŒã«ã®æ±ããæå®ããããªã·ãŒãå®çŸ©ããŸããDMARCãå°å ¥ããããšã§ãSPFãšDKIMã®å¹æãæ倧éã«çºæ®ããããªãããŸãã¡ãŒã«ã«ããè åšãå æ¬çã«é²ãããšãã§ããŸãã
SPFãDKIMãDMARCãçµã¿åãããããšã§ãã¡ãŒã«ã®éä¿¡å èªèšŒãå 容ã®å®å šæ§ãããã³ãªãããŸãã¡ãŒã«å¯Ÿçãå€å±€çã«å®çŸã§ããŸãããããã®æè¡ãé©åã«å°å ¥ã»éçšããããšããã¡ãŒã«ã»ãã¥ãªãã£ã®åäžã«ã€ãªãããŸãã
ãã ãããããã®æè¡ãå°å ¥ããéã¯ãèªçµç¹ã®ã¡ãŒã«é ä¿¡ã·ã¹ãã ãååã«ç解ããé©åãªèšå®ãè¡ãå¿ èŠããããŸãããŸããå®æçã«ã¬ã³ãŒããèŠçŽããå¿ èŠã«å¿ããŠæŽæ°ããããšãéèŠã§ãã
SPFã¯ãã¡ãŒã«ã®ãªãããŸãé²æ¢ã«äžå®ã®å¹æãçºæ®ããŸãããåç¬ã§ã¯äžèœã§ã¯ãããŸãããSPFã®éçãç解ããä»ã®èªèšŒæè¡ãšçµã¿åãããããšã§ãããå æ¬çãªã¡ãŒã«ã»ãã¥ãªãã£ãå®çŸããããšãå¯èœã§ããçµç¹ã®ã¡ãŒã«é ä¿¡ã·ã¹ãã ã«åãããŠãé©åãªå¯Ÿçãè¬ããããšãæ±ããããŸãã
ãŸãšã
SPFã¯ãã¡ãŒã«ã®ãªãããŸãé²æ¢ã«å¹æçãªéä¿¡å ãã¡ã€ã³èªèšŒæè¡ã§ããéä¿¡å IPã¢ãã¬ã¹ãæ£åœãªãã®ããæ€èšŒããããšã§ããã£ãã·ã³ã°è©æ¬ºãã¹ãã ã¡ãŒã«ã®ãªã¹ã¯ã軜æžã§ããŸããSPFã¬ã³ãŒãã®èšå®ã«ã¯æ³šæãå¿ èŠã§ãããé©åã«ç®¡çããããšã§ã¡ãŒã«ã®ä¿¡é Œæ§ãé«ããããŸãããã ããSPFã«ãéçããããããDKIMãDMARCãªã©ã®ä»ã®èªèšŒæè¡ãšçµã¿åãããããšãæšå¥šãããŠããŸããããããé©åã«å°å ¥ã»éçšããããšã§ãããå æ¬çãªã¡ãŒã«ã»ãã¥ãªãã£ãå®çŸã§ããã§ãããã