<< Click to Display Table of Contents >> Navigation: Event and Object Analysis > Capture Results Filtering > Filtration Basics > Rules > Criteria and Conditions > PROTOCOL condition |
Checks which protocol over which the message was received.
Description
This condition checks which protocol over which the message was received.
Format
<c name="protocol" value="[protocol-name(s)]" />
The "name" attribute:
The name attribute contains the action name: name="protocol".
The "value" attribute:
The value="..." attribute specifies the name to compare to the protocol name over which the message was received.
There may be multiple protocols to be checked, separated with a comma ','. You can place spaces after commas for readability purposes.
Example:
<?xml version="1.0" encoding="utf-8"?>
<filter name="Message filter" version="1.0">
<comment>Messages filter.</comment>
<table name="main">
<rule enabled="1">
<comment>
Drop messages received by SMTP or IMAP.
</comment>
<match>
<c name="protocol" value="smtp, imap" />
</match>
<action name="drop" />
</rule>
</table>
</filter>