We have some hosts that get their @host mail from the smarthost,
but that still accept mail from the internet.
package { 'monitoring-plugins-standard':
ensure => installed,
}
+
+ ferm::rule::simple { 'dsa-smtp':
+ description => 'Allow smtp access from the world',
+ port => '25',
+ }
}
notify => Exec['service apache2 reload'],
key => true,
}
+
+ ferm::rule::simple { 'dsa-smtp':
+ description => 'Allow smtp access from the world',
+ port => '25',
+ }
}
fail('We are not an exim::mx (or a postfix) yet do not have set our MXs to INCOMING-MX.')
}
- ferm::rule::simple { 'dsa-smtp':
- description => 'Allow smtp access from the world',
- port => '25',
- }
+ # firewall allow is done by the exim::mx class
}
$autocertdir = hiera('paths.auto_certs_dir')