The Server Configuration document in the Domino Directory allows you to restrict who in your organization can receive mail from external Internet domains. You set these restrictions on the Router/SMTP -> Restrictions and Controls -> SMTP Inbound Controls tab, under the Inbound Intended Recipients Controls section, in the fields "Allow messages intended only for the following Internet addresses" and "Deny messages intended for the following internet addresses."
If you enter a group in one of these fields, the SMTP listener task does not expand the group into the group's members and the restriction does not work. For example, the Acme corporation has a group named Support in its Domino Directory that contains the members Jane Doe and John Smith. If Acme included "Support@acme.com" in the "Deny messages intended for the following internet addresses" field of its Server Configuration document for Internet mail servers, the server will reject mail to the address "Support@acme.com". However, the server does not reject mail for Jane Doe and John Smith, since it does not expand the group Support into its constituent members. This will be fixed in a future release.