1 files changed, 16 insertions, 0 deletions

diff --git a/ymir.nix b/ymir.nix
index 25e3d9b7..0f32b998 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -421,6 +421,22 @@ in rec {
         permit_mynetworks,
         permit_sasl_authenticated,
         reject_unauth_destination,
+        check_sender_mx_access regex:${pkgs.writeText "spfpolicy" ''
+          /(^|\.)tu-muenchen\.de$/ DUNNO
+          /(^|\.)tum\.de$/ DUNNO
+          /(^|\.)lmu\.de$/ DUNNO
+          /(^|\.)uni-muenchen\.de$/ DUNNO
+          /(^|\.)lrz\.de$/ DUNNO
+          /(^|\.)badw-muenchen\.de$/ DUNNO
+          /(^|\.)badw\.de$/ DUNNO
+          /(^|\.)hm\.edu$/ DUNNO
+          /(^|\.)hswt\.de$/ DUNNO
+          /(^|\.)mhn\.de$/ DUNNO
+          /(^|\.)mwn\.de$/ DUNNO
+          /.*/ spfcheck
+        ''}
+      smtpd_restriction_classes = spfcheck
+      spfcheck =
         check_policy_service unix:private/policy-spf
 
       smtpd_relay_restrictions =