move helo restrictions to send

1 files changed, 4 insertions, 6 deletions

diff --git a/ymir.nix b/ymir.nix
index ac70b1c5..c8bbafff 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -405,12 +405,7 @@ in rec {
 
       smtpd_delay_reject = yes
       smtpd_helo_required = yes
-      smtpd_helo_restrictions =
-        permit_mynetworks,
-        reject_non_fqdn_helo_hostname,
-        reject_invalid_helo_hostname,
-        reject_unknown_reverse_client_hostname,
-        permit
+      smtpd_helo_restrictions = permit
 
       smtpd_recipient_restrictions =
         reject_unauth_pipelining,
@@ -420,6 +415,9 @@ in rec {
         check_policy_service unix:private/policy-quota,
         permit_mynetworks,
         permit_sasl_authenticated,
+        reject_non_fqdn_helo_hostname,
+        reject_invalid_helo_hostname,
+        reject_unknown_reverse_client_hostname,
         reject_unauth_destination,
         check_client_access regexp:${pkgs.writeText "spfpolicy" ''
           /(^|\.)tu-muenchen\.de$/ DUNNO