From: Peter Palfrader <peter@palfrader.org>
Date: Sun, 22 Sep 2019 09:17:13 +0000 (+0200)
Subject: On non-satellites, allow smtp from the world
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;ds=sidebyside;h=3a403df3e4f5c89ec1b1893396dfdd3c37e3bb7a;p=mirror%2Fdsa-puppet.git

On non-satellites, allow smtp from the world
---

diff --git a/modules/roles/manifests/mta.pp b/modules/roles/manifests/mta.pp
index b91afbddd..2c0ca4eeb 100644
--- a/modules/roles/manifests/mta.pp
+++ b/modules/roles/manifests/mta.pp
@@ -49,5 +49,9 @@ class roles::mta(
     if ! defined(Class['exim::mx']) and ! defined(Class['postfix']) {
       fail('We are not an exim::mx (or a postfix) yet do not have set our MXs to INCOMING-MX.')
     }
+    ferm::rule::simple { 'dsa-smtp':
+      description => 'Allow smtp access from the world',
+      port        => '25',
+    }
   }
 }