# {{ ansible_managed }} ip daddr {{ relayhost.ansible_facts.ansible_default_ipv4.address }} tcp dport { 25, 587 } accept comment "Allow SMTP/submission to relayhost"