postfix: add firewall rule

Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>

roles/postfix/tasks/main.yml

@@ -44,3 +44,10 @@
     mode: 0755
     owner: root
     group: ssl-cert
+
+- name: install the firewall rule
+  template:
+    src: firewall.sh
+    dest: /etc/firewall/postfix.sh
+    mode: 0744
+  notify: common.reload-firewall

roles/postfix/templates/firewall.sh

+#
+# {{ ansible_managed }}
+#
+
+cmd -A public_input_tcp -p tcp --dport 25 -j ACCEPT