Skip to content

[Mailer][Brevo] Update Webhook IPs #61223

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jul 24, 2025
Merged

[Mailer][Brevo] Update Webhook IPs #61223

merged 1 commit into from
Jul 24, 2025

Conversation

jarbey
Copy link
Contributor

@jarbey jarbey commented Jul 24, 2025

Q A
Branch? 6.4
Bug fix? yes (not really, but should be in the next patch to me)
New feature? no
Deprecations? no
Issues Fix #...
License MIT

Regarding official Brevo documentation the IP range for webhook changed
Source : https://help.brevo.com/hc/en-us/articles/15127404548498-Brevo-IP-ranges-List-of-publicly-exposed-services

Should also be applied on 7.3 version

Thank you so much for your hard work Symfony team ♥

@carsonbot
Copy link

Hey!

I see that this is your first PR. That is great! Welcome!

Symfony has a contribution guide which I suggest you to read.

In short:

  • Always add tests
  • Keep backward compatibility (see https://symfony.com/bc).
  • Bug fixes must be submitted against the lowest maintained branch where they apply (see https://symfony.com/releases)
  • Features and deprecations must be submitted against the 7.4 branch.

Review the GitHub status checks of your pull request and try to solve the reported issues. If some tests are failing, try to see if they are failing because of this change.

When two Symfony core team members approve this change, it will be merged and you will become an official Symfony contributor!
If this PR is merged in a lower version branch, it will be merged up to all maintained branches within a few days.

I am going to sit back now and wait for the reviews.

Cheers!

Carsonbot

Copy link
Member

@xabbuh xabbuh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks good to me (see also #61062 (comment))

@carsonbot carsonbot changed the title Update BrevoRequestParser.php [Mailer] Update BrevoRequestParser.php Jul 24, 2025
@OskarStark OskarStark changed the title [Mailer] Update BrevoRequestParser.php [Mailer][Brevo] Update Webhook IPs Jul 24, 2025
@xabbuh
Copy link
Member

xabbuh commented Jul 24, 2025

Thank you @jarbey.

@xabbuh xabbuh merged commit 39ff860 into symfony:6.4 Jul 24, 2025
11 checks passed
// localhost is added for testing
new IpsRequestMatcher(['185.107.232.1/24', '1.179.112.1/20', '172.246.240.1/20', '127.0.0.1']),
new IpsRequestMatcher(['1.179.112.0/20', '172.246.240.0/20', '127.0.0.1']),
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is xx.xx.xx.0/20 not the same as xx.xx.xx.1/20 in this context?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It is, but it's uncommon to use something else than .0 when using CIDR.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Probably the same but i was not sure. It also removes an old CIDR not used anymore by Brevo => 185.107.232.1/24 to comply with their last update (22 June 2024 if we trust : https://web.archive.org/web/20250622174648/https://help.brevo.com/hc/en-us/articles/15127404548498-Brevo-IP-ranges-List-of-publicly-exposed-services)

Brevo documentation : https://help.brevo.com/hc/en-us/articles/15127404548498-Brevo-IP-ranges-List-of-publicly-exposed-services

Their AS and RIPE Bloc (probably not up to date as it's mention 1.179.120.0/21 : https://ipinfo.io/AS200484#block-ranges)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

7 participants
pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy