Postfix で dk-milter(dk-filter) を使ってDomainKeys に対応する(Debian/Ubuntu編)

# Sane defaults: log to syslog
#DAEMON_OPTS="-l"
# Sign for example.com with key in /etc/mail/domainkey.key using
# selector '2007' (e.g. 2007._domainkey.example.com)
#DAEMON_OPTS="$DAEMON_OPTS -d example.com -s /etc/mail/domainkey.key -S 2007"
# See dk-filter(8) for a complete list of options
# 
 
DAEMON_OPTS="-l"
DAEMON_OPTS="$DAEMON_OPTS -d example.com -s /etc/dkim/example_com_selector.private -S example_com_selector"
SOCKET="inet:8892@127.0.0.1"

 
# Uncomment to specify an alternate socket
#SOCKET="/var/run/dk-filter/dk-filter.sock" # default
#SOCKET="inet:54321" # listen on all interfaces on port 54321
#SOCKET="inet:12345@localhost" # listen on loopback on port 12345
#SOCKET="inet:12345@192.0.2.1" # listen on 192.0.2.1 on port 12345

#! /bin/sh
#
### BEGIN INIT INFO
# Provides:             dk-filter
# Required-Start:       $remote_fs $syslog
# Required-Stop:        $remote_fs $syslog
# Should-Start:         $local_fs $network
# Should-Stop:          $local_fs $network
# Default-Start:        2 3 4 5
# Default-Stop:         0 1 6
# Short-Description:    Start the DomainKeys Milter service
### END INIT INFO
 
PATH=/sbin:/bin:/usr/sbin:/usr/bin
DAEMON=/usr/bin/dk-filter
NAME=dk-filter
DESC="DomainKeys Filter"
RUNDIR=/var/run/$NAME
USER=dk-filter
GROUP=dk-filter
SOCKET=$RUNDIR/$NAME.sock
PIDFILE=$RUNDIR/$NAME.pid

# How long to wait for the process to die on stop/restart
stoptimeout=5
 
test -x $DAEMON || exit 0
 
if [ ! -d $RUNDIR ] ; then
        mkdir $RUNDIR
        chown $USER $RUNDIR
fi

# Include dk-filter defaults if available
if [ -f /etc/default/dk-filter ] ; then
        . /etc/default/dk-filter
fi
 
DAEMON_OPTS="-u $USER -P $PIDFILE -p $SOCKET $DAEMON_OPTS"
 
start() {
        # Create the run directory if it doesn't exist
        if [ ! -d $RUNDIR ]; then
                install -o $USER -g $GROUP -m 2755 -d $RUNDIR || return 2
        fi
        # Clean up stale sockets
        if [ -f $PIDFILE -a -e $SOCKET -a -S $SOCKET ]; then
                pid=`cat $PIDFILE`
                if ! ps -C $DAEMON -s $pid >/dev/null; then
                        rm $SOCKET $PIDFILE
                fi
        fi
        UMASK=`umask`
        # Force group-writable socket
        umask 002
        start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -- $DAEMON_OPTS
        # Revert to original umask out of extreme caution
        umask $UMASK
}
 
stop() {
        start-stop-daemon --stop --retry $stoptimeout --exec $DAEMON
}
 
case "$1" in
  start)
        echo -n "Starting $DESC: "
        start
        echo "$NAME."
        ;;
  stop)
        echo -n "Stopping $DESC: "
        stop
        echo "$NAME."
        ;;
  restart|force-reload)
        echo -n "Restarting $DESC: "
        stop
        start
        echo "$NAME."
        ;;
  *)
        N=/etc/init.d/$NAME
        echo "Usage: $N {start|stop|restart|force-reload}" >&2
        exit 1
        ;;
esac
 
exit 0

# ユーザ dk-filter  を追加します。
$ adduser dk-filter

# ディレクトリ /var/run/dk-filter  を作成します。
$ mkdir -p /var/run/dk-filter
# ディレクトリ /var/run/dk-filter  の所有権をdk-filterとします。
$ chown dk-filter. /var/run/dk-filter