Route all internal SMTP traffic through IPsec.

1 files changed, 0 insertions, 17 deletions

diff --git a/roles/common/templates/etc/iptables/services.j2 b/roles/common/templates/etc/iptables/services.j2
index 247f98a..2def27f 100644
--- a/roles/common/templates/etc/iptables/services.j2
+++ b/roles/common/templates/etc/iptables/services.j2
@@ -26,31 +26,14 @@ out     tcp     636                                     # LDAPS
 {% endif %}
 {% if 'MX' in group_names %}
 in      tcp     25                                      # SMTP
-{% if 'MDA' not in group_names %}
-out     tcp     {{ postfix_instance.IMAP.port }}
-{% endif %}
-{% if 'lists' not in group_names %}
-out     tcp     {{ postfix_instance.lists.port }}
-{% endif %}
 {% endif %}
 {% if 'out' in group_names %}
-{% if groups.all | difference([inventory_hostname]) %}
-in      tcp     {{ postfix_instance.out.port }}
-{% endif %}
 out     tcp     25                                      # SMTP
-{% else %}
-out     tcp     {{ postfix_instance.out.port }}
 {% endif %}
 {% if 'IMAP' in group_names %}
 in      tcp     993                                     # IMAPS
 in      tcp     4190                                    # MANAGESIEVE
 {% endif %}
-{% if 'MDA' in group_names and 'MX' not in group_names %}
-in      tcp     {{ postfix_instance.IMAP.port }}
-{% endif %}
-{% if 'lists' in group_names and 'MX' not in group_names %}
-in      tcp     {{ postfix_instance.lists.port }}
-{% endif %}
 {% if 'MSA' in group_names %}
 in      tcp     587                                     # SMTP-AUTH
 {% endif %}