[JAMES-3869] JSPF mailet should skip private networks in addition to 127.0.0.1 and use correct HELO

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 3.8.0
• Assignee: Unassigned
• Reporter: ouvtam
• Created: 16/Dec/22 10:51
• Updated: 30/Dec/22 02:02
• Resolved: 30/Dec/22 02:02

Description

Private Networks

The JSPF mailet skips SPF checks for remote address 127.0.0.1.

In addition, the mailet should also skip SPF check for following private class networks:

• 127.0.0.0/8
• 10.0.0.0/8
• 172.16.0.0 – 172.31.255.255
• 192.168.0.0/16

Make it configurable to add more flexibility to exclude other networks.

HELO Check

Currently the SPF HELO check uses the remote address instead of the HELO provided by the SMTP session. The SPF HELO check gets important for null senders (e.g. bounces) when no sender address is available.

Issue Links

• links to: GitHub Pull Request #1361