Use the RESTRICT statement to specify addresses of users who cannot use SMTP services. This includes sending and receiving mail.
Syntax
.--------. V | >>-RESTRICT--+-PURGE------+----userid-+--ENDRESTRICT----------->< +-RETURN-----+ '-TRANSFERTO-'
Parameters
- PURGE
- Specifies that the spool data set is to be purged.
- RETURN
- Specifies that the spool data set is to be returned to the originator.
- TRANSFERTO
- Specifies that the spool data set is to be forwarded to the specified userid.
- userid
- Specifies the address of the user.
Examples
In the following example, mail
from restricted users is returned, no mail is accepted from KNIGHT
at 2 different nodes, and no mail is accepted from anyone on the host
CASTLE:
RESTRICT RETURN
KNIGHT@CAMPTENT
KNIGHT@TOURNMNT
*@CASTLE
ENDRESTRICTUsage notes
- You can use a wildcard character (*) in the user identifier string, or the host/domain identifier string, or both. These two strings are separated by the @ character (for example, userid@hostid). It can be used to replace the entire string. For example, *@castle restricts all the users at castle. You can use it to replace a portion of the string when it is appended to the end of the string. For example, mary*@castle restricts all the user IDs beginning with the character string mary at castle. However, the wildcard character cannot be used as a prefix to a string or embedded within the string.
- Specifying *@* causes no mail to be sent or accepted, and results in undeliverable mail messages to be issued.
- The ENDRESTRICT statement ends the RESTRICT statement.
- If SMTP receives a spool data set from a restricted user, the
spool data set is as follows:
- Purged, if PURGE is specified
- Returned to the originator, if RETURN is specified
- Forwarded to a specific user ID, if TRANSFERTO is specified
In addition, SMTP rejects any MAIL FROM or RCPT TO commands whose destinations are restricted users.
- The TCPIP and NJE address must be included in the RESTRICT statement list in order to restrict a user from sending and receiving mail. SMTP rejects only addresses that are in the restrict list; it does not check for aliases. For example, you can restrict user@host1. If host2 is an alias for host1, mail for user@host2 is not rejected unless user@host2 is also in the restrict list.
- When the RESTRICT statement is used, incoming mail must be in NETDATA format.
- The RESTRICT statement cannot be used if the SMTP server is running as a secure gateway. Either remove or comment out the RESTRICT statements from the SMTP configuration data set.
- The RESTRICT statement cannot be used in combination with the SECURE statement.