From e644c1ae1b9b00767428e92269d0e414af5141c0 Mon Sep 17 00:00:00 2001 From: alkatrazz Date: Fri, 29 May 2026 17:27:08 +0200 Subject: [PATCH] fix(nftables): ouvrir port 25 SMTP pour pods k8s (10.42/16) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit n8n tourne dans un pod k8s — le port 25 de postfix n'était ouvert que pour 192.168.10.0/24 (nœuds cluster), pas pour 10.42.0.0/16 (pods). Connexion ETIMEDOUT au nœud Send Email du workflow alertes. Co-Authored-By: Claude Sonnet 4.6 --- ansible/roles/gateway/templates/nftables.conf.j2 | 3 +++ 1 file changed, 3 insertions(+) diff --git a/ansible/roles/gateway/templates/nftables.conf.j2 b/ansible/roles/gateway/templates/nftables.conf.j2 index f266a5a..1862309 100644 --- a/ansible/roles/gateway/templates/nftables.conf.j2 +++ b/ansible/roles/gateway/templates/nftables.conf.j2 @@ -47,6 +47,9 @@ table inet filter { # LiteLLM proxy (pods k8s 10.42/16 + nœuds cluster) tcp dport 4000 ip saddr { 192.168.10.0/24, 10.42.0.0/16 } accept + # Postfix relay SMTP (pods k8s 10.42/16 + nœuds cluster) + tcp dport 25 ip saddr { 192.168.10.0/24, 10.42.0.0/16 } accept + log prefix "nft-drop: " drop }