I am facing a problem where a fork would be the perfect solution to, except it should not be possible to push changes to the upstream (not even though pull-requests). However, it must be possible to pull changes from the upstream once a while.
Is there a way I can block pushing to the upstream or are there other solutions I can apply?