diff --git a/nix/lib/config/legacy.nix b/nix/lib/config/legacy.nix
index 001732d..0ad0aab 100644
--- a/nix/lib/config/legacy.nix
+++ b/nix/lib/config/legacy.nix
@@ -265,7 +265,11 @@ in
             proto = "tcp";
             sourcePort = 2225;
           }
-        ];
+        ] ++ map (port: {
+          destination = config.site.net.serv.hosts4.mail;
+          proto = "tcp";
+          sourcePort = port;
+        }) [ 25 465 587 110 143 993 995 ];
       }
 
       # host priv*-gw settings