diff --git a/ansible/roles/gateway/templates/nftables.conf.j2 b/ansible/roles/gateway/templates/nftables.conf.j2
index f266a5a..1862309 100644
--- a/ansible/roles/gateway/templates/nftables.conf.j2
+++ b/ansible/roles/gateway/templates/nftables.conf.j2
@@ -47,6 +47,9 @@ table inet filter {
         # LiteLLM proxy (pods k8s 10.42/16 + nœuds cluster)
         tcp dport 4000 ip saddr { 192.168.10.0/24, 10.42.0.0/16 } accept
 
+        # Postfix relay SMTP (pods k8s 10.42/16 + nœuds cluster)
+        tcp dport 25 ip saddr { 192.168.10.0/24, 10.42.0.0/16 } accept
+
         log prefix "nft-drop: " drop
     }