hostname: 10.0.0.1 inherits: [ _default, _debian ]

recipes:

aliases: true
iptables:
  input:
    - ports: { dport: [22, 25], match: state, state: NEW }