/REJECT {=[NO]HOSTS=(hosts) |=[NO]NETWORKS=(networks)
       |=[NO]MESSAGE="text"] }

    Optional. Default: No rejections if /ACCEPT is set to its default
    (service all hosts).

    o  /REJECT=HOST=host denies host access to the service.

    o  /REJECT=NOHOST=host regrants host access to the service.

    The following options are available.

    Option             Meaning

    HOSTS=hosts        Makes the service unavailable to the specified
                       hosts.

                       Maximum is 32.

                       Examples:

                       /REJECT=HOSTS=(host1_name,host2_name, host3_
                       address)

                       /REJECT=HOSTS=*
    NOHOSTS=hosts      Removes the specified hosts from the reject
                       list. You can use the wildcard character (*)
                       in place of the hosts list to remove all hosts
                       from the reject list.

                       Maximum is 32.

                       Examples:

                       /REJECT=NOHOSTS=(host1_name,host2_name,host3_
                       address)

                       /REJECT=NOHOSTS=*
    NETWORKS=networks  Makes the service unavailable to the hosts on
                       the specified networks.

                       Maximum is 16.

                       For each network, you can optionally specify
                       the network mask. The default net mask equals
                       network's class number. For example, for
                       network 11.200.0.0., the default mask is
                       255.0.0.0.

                       Example:

                       /REJECT=NETWORKS=(net1_name,net2_address,
                       net3:net3mask)
    NONETWORKS[=networks]moves the specified networks from the reject
                       list. You can use the wildcard character (*)
                       in place of the networks list to remove all
                       networks from the reject list.

                       Maximum is 16.

                       For each network, you can optionally specify
                       the network mask. The default net mask equals
                       network's class number. For example, for
                       network 11.200.0.0., the default mask is
                       255.0.0.0.

                       Example:

                       /REJECT=NONETWORKS=(net1_name,net2_address,
                       net3:net3mask)
    [NO]MESSAGE=text   Message sent to "reject-list" clients when
    NOMESSAGE          TCP/IP Services rejects their request for the
                       service.

                       Optional.

                       Specify a character string up to 63
                       characters.

                       Enclose the string in quotation marks.

                       Use this option only for a service whose
                       clients require and support reject messages.

                       Messages are sent with a carriage return/line
                       feed at the end.

                       For RLOGIN, RSH, and REXEC, this message is
                       preceded by a byte with a value of 1 and is
                       terminated with a byte with a value of 0.

                       /REJECT=NOMESSAGE deletes the stored message
                       text.