Support adding dns snippets on orff from other hosts

[dsa-puppet.git] / modules / exim / manifests / mx.pp

diff --git a/modules/exim/manifests/mx.pp b/modules/exim/manifests/mx.pp
index 80ed36f7e72c9b0d875733f0a0d6b374bba54e5c..3c40623d64826184ac0dfc7c0b6bc577464e137a 100644 (file)
--- a/modules/exim/manifests/mx.pp
+++ b/modules/exim/manifests/mx.pp
@@ -13,6 +13,7 @@ class exim::mx inherits exim {
                notify  => Service['exim4'],
        }
 
+       # MXs used as smarthosts
        @ferm::rule { 'dsa-exim-submission':
                description => 'Allow SMTP',
                rule        => '&SERVICE_RANGE(tcp, submission, $SMTP_SOURCES)'
@@ -22,6 +23,11 @@ class exim::mx inherits exim {
                domain      => 'ip6',
                rule        => '&SERVICE_RANGE(tcp, submission, $SMTP_V6_SOURCES)',
        }
+       dnsextras::entry{ "tlsa-submission":
+               zone => 'debian.org',
+               label => "_587._tcp.${::fqdn}",
+               rrtype => 'TXT',
+               rrdata => 'testing' }
 
        package { 'nagios-plugins-standard':
                ensure => installed,