Move some comments inside their conditionals.

templates/iptables-rules.v4.j2

@@ -129,8 +129,8 @@
 {% endif %}
 
 {% if psql_firewall_enabled %}
-# PostgreSQL
 {% if psql_db_port is defined %}
+# PostgreSQL
 {% if psql_listen_on_ext_int is defined and psql_listen_on_ext_int %}
 {% if psql_global_firewall is defined %}
 {% for cidr in psql_global_firewall %}
@@ -285,8 +285,8 @@
 -A INPUT -m pkttype --pkt-type multicast -d {{ orientdb_hazelcast_multicast_group }} -j ACCEPT
 -A INPUT -m state --state NEW -s {{orientdb_hazelcast_multicast_group}} -p tcp -m tcp --dport {{ orientdb_hazelcast_multicast_port }} -j ACCEPT
 {% endif %}
-# Postfix
 {% if postfix_relay_server is defined and postfix_relay_server%}
+# Postfix
 #
 # These are only needed on the machines that act as relay servers
 #
@@ -304,6 +304,7 @@
 -A OUTPUT -p tcp -m multiport --dports 25,587,465 -j DROP
 {% endif %}
 {% if postfix_relay_client is defined and postfix_relay_client%}
+# Postfix
 #
 # When we are not a relay server but we want send email using our relay
 -A OUTPUT -p tcp -m multiport --dports 25,587,465 -s 127.0.0.1 -d 127.0.0.1 -j ACCEPT