+ # Allow mail to be routed to smarthost. This may be less than
+ # idea: it seems safer to generate a list of system users to
+ # allow, and then require individual members to request smtp
+ # access. We'll leave that for the wheezy machines.
+ proto tcp dport smtp daddr mail.hcoop.net ACCEPT;
+