diff --git a/roles/mail_server/tests/test_client1.py b/roles/mail_server/tests/test_client1.py
new file mode 100644
index 0000000000000000000000000000000000000000..f6aafc89bd8245ad7d150a7ff5c58f64cde66b27
--- /dev/null
+++ b/roles/mail_server/tests/test_client1.py
@@ -0,0 +1,26 @@
+import testinfra.utils.ansible_runner
+
+testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(
+    '.molecule/ansible_inventory').get_hosts('client1')
+
+
+def test_open_relay(Command):
+    """
+    Tests if mail server behaves as open relay.
+    """
+
+    no_recipients_accepted = 24
+
+    send = Command('swaks --suppress-data --to root@client1 --server parameters-mandatory')
+    assert send.rc == no_recipients_accepted
+    assert "Relay access denied" in send.stdout
+
+
+def test_allowed_relay(Command):
+    """
+    Tests if mail server allows relaying from configured IPs/networks.
+    """
+
+    send = Command('swaks --suppress-data --to root@client1 --server parameters-optional')
+    assert send.rc == 0
+    assert "Ok: queued as" in send.stdout