Definition

Stores access filters (rules). If no rules are specified, then domain is allowed access to all services from all clients. Rules are separated by a dollar sign ($). The rules are evaluated in this manner:

• Access is granted if the client information matches an allow filter for that service.

• Access is denied if the client information matches a deny filter for that service.

• If no match is made with any allow or deny filters, access is granted, except in the case where there are allow filters but no deny filters. In this case, a lack of match means access is denied.

  Note the effect of the preceding rule:

• If no rule is specified for mailAllowedServiceAccess, users are allowed access to all services from all clients.

• If an allow filter is explicitly specified for any service, users are denied access to all other services that are not specified.

  For example, suppose you want to enable S/MIME for a domain. If you do not specify any allow filters or deny filters for mailAllowedServiceAccess, S/MIME is enabled.

  Now suppose you specify an allow filter for the pop service. In this case, S/MIME is disabled until you also specify an allow filter for the smime service.

For a full explanation of access filters and an alternate way to control access through the administration console or the config utility, see “Configuring Client Access to POP, IMAP, and HTTP Services” in the Messaging Server Administration Guide.