{
  "before": [
    {"name": "net-a", "prefix": "10.0.0.0/24", "priority": 100, "action": "OUTPUT:1"},
    {"name": "net-b", "prefix": "10.0.1.0/24", "priority": 100, "action": "OUTPUT:2"}
  ],
  "after": [
    {"name": "deny-host", "prefix": "10.0.0.42/32", "priority": 200, "action": "DROP"},
    {"name": "net-a", "prefix": "10.0.0.0/24", "priority": 100, "action": "OUTPUT:1"},
    {"name": "net-b-new", "prefix": "10.0.1.0/24", "priority": 100, "action": "OUTPUT:3"}
  ],
  "packets": ["10.0.0.42", "10.0.1.9", "192.0.2.1"]
}