Add iptables for sign, drop no longer needed postfix (it's in base)

files/iptables/iptables.sign

@@ -0,0 +1,12 @@
+# {{ ansible_managed }}
+*filter
+:INPUT ACCEPT [0:0]
+:FORWARD ACCEPT [0:0]
+:OUTPUT ACCEPT [0:0]
+-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT 
+-A INPUT -p icmp -j ACCEPT 
+-A INPUT -i lo -j ACCEPT 
+-A INPUT -j REJECT --reject-with icmp-host-prohibited 
+-A FORWARD -j REJECT --reject-with icmp-host-prohibited 
+COMMIT
+

inventory/group_vars/sign

@@ -1,3 +1,4 @@
 ---
 freezes: true
 postfix_group: sign
+iptables: $files/iptables/iptables.sign

playbooks/groups/sign.yml

@@ -20,7 +20,6 @@
   - include: $tasks/base.yml
   - include: $tasks/rkhunter.yml
   - include: $tasks/motd.yml
-  - include: $tasks/postfix_basic.yml
   - include: $tasks/sign_setup.yml
 
   handlers: