action :accept
source "net"
dest "fw"
- proto "tcp:syn"
+ proto "tcp"
dest_ports port
source_ports "1024-65535"
end
family :inet
source "net:#{smarthosts_inet.sort.join(',')}"
dest "fw"
- proto "tcp:syn"
+ proto "tcp"
dest_ports port
source_ports "1024-65535"
+ not_if { smarthosts_inet.empty? }
end
firewall_rule "accept-inbound-smtp-#{port}" do
family :inet6
source "net:#{smarthosts_inet6.sort.join(',')}"
dest "fw"
- proto "tcp:syn"
+ proto "tcp"
dest_ports port
source_ports "1024-65535"
+ not_if { smarthosts_inet6.empty? }
end
end
end
action :reject
source "fw"
dest "net"
- proto "tcp:syn"
+ proto "tcp"
dest_ports "smtp"
end
end