salt/base/firewall/global/smtp.sls

iptables_input_smtp:
  iptables.insert:
    - require:
      - iptables: iptables_input_localhost
    - save: True
    - position: 2
    - table: filter
    - chain: INPUT
    - jump: ACCEPT
    - proto: tcp
    - dport: 25