summaryrefslogtreecommitdiffstats
path: root/roles/common/templates/etc/iptables
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2013-12-01 23:51:28 +0100
committerGuilhem Moulin <guilhem@fripost.org>2015-06-07 02:51:03 +0200
commitd363522c15b1d1ce61b2780a539dd09e2e679d34 (patch)
tree6dcabada360ac52e05ec02eb2ff595626e0dc62f /roles/common/templates/etc/iptables
parent0c99d9d1600c0fe2c494f9c59ba8ea7966dcd65f (diff)
Configure the MX:es.
Diffstat (limited to 'roles/common/templates/etc/iptables')
-rw-r--r--roles/common/templates/etc/iptables/services.j28
1 files changed, 6 insertions, 2 deletions
diff --git a/roles/common/templates/etc/iptables/services.j2 b/roles/common/templates/etc/iptables/services.j2
index b1b7f0f..8a9409d 100644
--- a/roles/common/templates/etc/iptables/services.j2
+++ b/roles/common/templates/etc/iptables/services.j2
@@ -5,9 +5,13 @@
# (in|out|inout)[46]? (tcp|udp|..) (port|port:port|port,port) (port|port:port|port,port)
inout udp 500 500 # ISAKMP
-
-in tcp {{ ansible_ssh_port|default('22') }} # SSH
+#inout udp 4500 4500 # IPSec NAT Traversal
out tcp 80,443 # HTTP/HTTPS
out udp 53 # DNS
out udp 67 # DHCP
+
+in tcp {{ ansible_ssh_port|default('22') }} # SSH
+{% if 'MX' in group_names %}
+in tcp 25 # SMTP
+{% endif %}