From fb679adc5e1eaf49758788ca86f98fe9e8a41979 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <pngwjpgh@users.noreply.github.com>
Date: Mon, 25 Jul 2016 22:01:39 +0200
Subject: deny uucp via restriction

---
 hel.nix | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/hel.nix b/hel.nix
index 6eb9afe2..7e77a230 100644
--- a/hel.nix
+++ b/hel.nix
@@ -175,15 +175,22 @@
       relayHost = "uucp:ymir";
       recipientDelimiter = "+";
       transport = ''
-        uucp@hel.midgard.yggdrasil local:hel
         * uucp:ymir
       '';
       extraMasterConf = ''
         uucp unix - n n - - pipe flags=Fqhu user=uucp argv=/var/setuid-wrappers/uux -z -a$sender - $nexthop!rmail ($recipient)
       '';
-      extraAliases = ''
-        uucp /dev/null
+      extraMainConf = ''
+        smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/recipient_restrictions
+                                     , permit_mynetworks
+                                     , reject_unauth_destination
+                                     , permit
       '';
+      aliasFiles = {
+        "recipient_restrictions" = ''
+          uucp@hel.midgard.yggdrasil REJECT
+        '';
+      };
     };
 
     udev.extraRules = ''
-- 
cgit v1.2.3