From 3a403df3e4f5c89ec1b1893396dfdd3c37e3bb7a Mon Sep 17 00:00:00 2001
From: Peter Palfrader <peter@palfrader.org>
Date: Sun, 22 Sep 2019 11:17:13 +0200
Subject: [PATCH] On non-satellites, allow smtp from the world

---
 modules/roles/manifests/mta.pp | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/modules/roles/manifests/mta.pp b/modules/roles/manifests/mta.pp
index b91afbddd..2c0ca4eeb 100644
--- a/modules/roles/manifests/mta.pp
+++ b/modules/roles/manifests/mta.pp
@@ -49,5 +49,9 @@ class roles::mta(
     if ! defined(Class['exim::mx']) and ! defined(Class['postfix']) {
       fail('We are not an exim::mx (or a postfix) yet do not have set our MXs to INCOMING-MX.')
     }
+    ferm::rule::simple { 'dsa-smtp':
+      description => 'Allow smtp access from the world',
+      port        => '25',
+    }
   }
 }
-- 
2.20.1