bug #61062 [Brevo Mailer] Webhook IP Addresses have changed (richardhj)

fabpot · fabpot · commit 12994462170d · 2025-07-08T08:00:28.000+02:00
This PR was merged into the 6.4 branch. Discussion ---------- [Brevo Mailer] Webhook IP Addresses have changed | Q | A | ------------- | --- | Branch? | 6.4 | Bug fix? | yes | New feature? | no | Deprecations? | no | Issues | | License | MIT So first I recognized multiple `RejectWebhookExceptions`. Then I checked my access logs and realized that webhook from Brevo can also come from the '172.246.240.1/20' IP range. This is also documented here: https://help.brevo.com/hc/en-us/articles/15127404548498-Brevo-IP-ranges-List-of-publicly-exposed-services This new IP range must have been added later this year, it hasn't been there in January, for instance: https://web.archive.org/web/20250125161029/https://help.brevo.com/hc/en-us/articles/15127404548498-Brevo-IP-ranges-List-of-publicly-exposed-services So this PR adds the new IP range for ingress webhook validation.  Commits ------- 0cf7545 Update BrevoRequestParser.php
diff --git a/src/Symfony/Component/Mailer/Bridge/Brevo/Webhook/BrevoRequestParser.php b/src/Symfony/Component/Mailer/Bridge/Brevo/Webhook/BrevoRequestParser.php
@@ -37,7 +37,7 @@ protected function getRequestMatcher(): RequestMatcherInterface
             new IsJsonRequestMatcher(),
             // https://developers.brevo.com/docs/how-to-use-webhooks#securing-your-webhooks
             // localhost is added for testing
-            new IpsRequestMatcher(['185.107.232.1/24', '1.179.112.1/20', '127.0.0.1']),
+            new IpsRequestMatcher(['185.107.232.1/24', '1.179.112.1/20', '172.246.240.1/20', '127.0.0.1']),
         ]);
     }
 

Original file line number	Diff line number	Diff line change
`@@ -37,7 +37,7 @@ protected function getRequestMatcher(): RequestMatcherInterface`
`37`	`37`	`new IsJsonRequestMatcher(),`
`38`	`38`	`// https://developers.brevo.com/docs/how-to-use-webhooks#securing-your-webhooks`
`39`	`39`	`// localhost is added for testing`
`40`		`- new IpsRequestMatcher(['185.107.232.1/24', '1.179.112.1/20', '127.0.0.1']),`
	`40`	`+ new IpsRequestMatcher(['185.107.232.1/24', '1.179.112.1/20', '172.246.240.1/20', '127.0.0.1']),`
`41`	`41`	`]);`
`42`	`42`	`}`
`43`	`43`