summaryrefslogtreecommitdiffstats
path: root/roles/common
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2014-07-09 01:23:01 +0200
committerGuilhem Moulin <guilhem@fripost.org>2015-06-07 02:52:49 +0200
commit55e9b2a0ebc87a353f9c9496a77b313e41e47bd4 (patch)
tree30b5abd316a31688c494f03ee4cd2ae4fccc38f5 /roles/common
parent368540caee8fff8aa90b1542897188e9f98ac585 (diff)
Perform the alias resolution and address validation solely on the MX:es.
We can therefore spare some lookups on the MDA, and use static:all instead.
Diffstat (limited to 'roles/common')
-rw-r--r--roles/common/templates/etc/iptables/services.j22
1 files changed, 2 insertions, 0 deletions
diff --git a/roles/common/templates/etc/iptables/services.j2 b/roles/common/templates/etc/iptables/services.j2
index 4e78d1e..d24b55d 100644
--- a/roles/common/templates/etc/iptables/services.j2
+++ b/roles/common/templates/etc/iptables/services.j2
@@ -20,6 +20,8 @@ out tcp 636 # LDAPS
{% endif %}
{% if 'MX' in group_names %}
in tcp 25 # SMTP
+out tcp {{ postfix_instance.IMAP.port }}
+out tcp {{ postfix_instance.lists.port }}
{% endif %}
{% if 'out' in group_names %}
in tcp {{ postfix_instance.out.port }}