[JAMES-3183] Implement a matcher to match X-Originating-IP

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Component/s: Matchers/Mailets (bundled)
• Assignee: Unassigned
• Reporter: Matthieu Baechler
• Created: 15/May/20 09:01
• Updated: 15/May/20 09:05
• Resolved: 15/May/20 09:05

Description

We could provide a matcher to do some matching on X-Originating-IP header in the same way as RemoteAddrInNetwork.

It allows to do the same kind of check in cases there's a reverse-proxy in front of James.

It is best used in combination with RemoteAddrInNetwork to check that both X-Originating-IP and remoteAddr are in known networks. This will prevent relaying messages with forged X-Originating-IP.