add protocol/port filter