PROTOCOL condition

<< Click to Display Table of Contents >>

Navigation:  Event and Object Analysis > Capture Results Filtering > Filtration Basics > Rules > Criteria and Conditions >

PROTOCOL condition

Checks which protocol over which the message was received.

Description

This condition checks which protocol over which the message was received.

Format

<c name="protocol" value="[protocol-name(s)]" />

The "name" attribute:

The name attribute contains the action name: name="protocol".

The "value" attribute:

The value="..." attribute specifies the name to compare to the protocol name over which the message was received.

There may be multiple protocols to be checked, separated with a comma ','. You can place spaces after commas for readability purposes.

Example:

<?xml version="1.0" encoding="utf-8"?>
<filter name="Message filter" version="1.0">
 <comment>Messages filter.</comment>
 <table name="main">
   <rule enabled="1">
     <comment>
       Drop messages received by SMTP or IMAP.
     </comment>
     <match>
       <c name="protocol" value="smtp, imap" />
     </match>
     <action name="drop" />
   </rule>
   </table>
</filter>