On non-satellites, allow smtp from the world

diff --git a/modules/roles/manifests/mta.pp b/modules/roles/manifests/mta.pp
index b91afbd..2c0ca4e 100644 (file)
--- a/modules/roles/manifests/mta.pp
+++ b/modules/roles/manifests/mta.pp
@@ -49,5 +49,9 @@ class roles::mta(
     if ! defined(Class['exim::mx']) and ! defined(Class['postfix']) {
       fail('We are not an exim::mx (or a postfix) yet do not have set our MXs to INCOMING-MX.')
     }
+    ferm::rule::simple { 'dsa-smtp':
+      description => 'Allow smtp access from the world',
+      port        => '25',
+    }
   }
 }