for now: only rules with a specified transport protocol are applicable