deny uucp via restriction

1 files changed, 10 insertions, 3 deletions

diff --git a/hel.nix b/hel.nix
index 6eb9afe2..7e77a230 100644
--- a/hel.nix
+++ b/hel.nix
@@ -175,15 +175,22 @@
       relayHost = "uucp:ymir";
       recipientDelimiter = "+";
       transport = ''
-        uucp@hel.midgard.yggdrasil local:hel
         * uucp:ymir
       '';
       extraMasterConf = ''
         uucp unix - n n - - pipe flags=Fqhu user=uucp argv=/var/setuid-wrappers/uux -z -a$sender - $nexthop!rmail ($recipient)
       '';
-      extraAliases = ''
-        uucp /dev/null
+      extraMainConf = ''
+        smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/recipient_restrictions
+                                     , permit_mynetworks
+                                     , reject_unauth_destination
+                                     , permit
       '';
+      aliasFiles = {
+        "recipient_restrictions" = ''
+          uucp@hel.midgard.yggdrasil REJECT
+        '';
+      };
     };
 
     udev.extraRules = ''