<< Click to Display Table of Contents >> Navigation:  Event and Object Analysis > Capture Results Filtering > Filtration Basics > Rules > Actions

All the actions are described in XML tags <action>. For each action, the name attribute specifies its name which determines the operation to be performed with the message. Other tag attributes specify action parameters. Attribute names for additional parameters depend on the action.

The general structure of the XML action tag is the following:

<action name="action name" [parameters] />

or

<action name="action name" [parameters]></action>

Most actions use the value="…" attribute which specifies the values required to perform the action, or the data="…"attribute which may specify an external file for the action to load data from (word sets, domain name lists or other parameters). Attributes and their effects are detailed in descriptions of corresponding actions.

Basic actions

Basic actions affect how the message passes through the filter. Basic actions include ACCEPT, DROP, JUMP and RETURN.

User actions

User actions modify the message or its metadata, or pass the message through external services (antivirus software, URl classifiers, DNS blacklists, etc.).