Lowercase rules and sender/recipient addresses when parsing the policy, or the policy values may not match the input values.

It is safe to lowercase both as exploiting case-sensitivity in mail address local parts or domain name spaces is not allowed.

Demo Python code:

    >>> address = "Jeroen.vanMeeuwen@kolab.org"
    >>> address.startswith('jeroen')
    False

Solves #496.

1 files changed, 4 insertions, 0 deletions

diff --git a/bin/kolab_smtp_access_policy.py b/bin/kolab_smtp_access_policy.py
index a1e6639..f0773d3 100755
--- a/bin/kolab_smtp_access_policy.py
+++ b/bin/kolab_smtp_access_policy.py
@@ -304,7 +304,11 @@ def parse_policy(sender, recipient, policy):
 
     rules = { 'allow': [], 'deny': [] }
 
+    sender = sender.lower()
+    recipient = recipient.lower()
+
     for rule in policy:
+        rule = rule.lower()
         if rule.startswith("-"):
             rules['deny'].append(rule[1:])
         else: