{
    "compile_table": "PXY_INTERCEPT_COMPILE",
    "group_table": "PXY_INTERCEPT_GROUP",
    "rules": [
        {
            "compile_id": 0,
            "service": 1,
            "action": 1,
            "table_name": "COMPILE_ALIAS",
            "do_blacklist": 1,
            "do_log": 1,
            "effective_rage": 0,
            "user_region": "zone=pkt_payload;substitute=/AAAA/BBBB",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name": "Untitled",
                        "regions": [
                            {
                                "table_name": "HTTP_URL",
                                "table_type": "string",
                                "table_content": {
                                    "keywords": "i.ytimg.com",
                                    "expr_type": "none",
                                    "match_method": "sub",
                                    "format": "uncase plain"
                                }
                            }
                        ]
                }
            ]
        },
        {
            "compile_id": 1,
            "service": 1,
            "action": 2,
            "do_blacklist": 1,
            "do_log": 1,
            "effective_rage": 0,
            "user_region": "zone=pkt_payload;substitute=/AAAA/BBBB",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name": "Untitled",
                    "regions": [
                        {
                            "table_name": "PXY_INTERCEPT_IP",
                            "table_type": "ip",
                            "table_content": {
                                "addr_type": "ipv4",
                                "src_ip": "192.168.50.156",
                                "mask_src_ip": "255.255.255.255",
                                "src_port": "0",
                                "mask_src_port": "65535",
                                "dst_ip": "0.0.0.0",
                                "mask_dst_ip": "255.255.255.255",
                                "dst_port": "0",
                                "mask_dst_port": "65535",
                                "protocol": 0,
                                "direction": "double"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 2,
            "service": 1,
            "action":2,
            "do_blacklist": 1,
            "do_log": 1,
            "effective_rage": 0,
            "user_region": "zone=pkt_payload;substitute=/AAAA/BBBB",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name": "Untitled",
                    "regions": [
                        {
                            "table_name": "PXY_INTERCEPT_DOMAIN",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "www.google.com",
                                "expr_type": "none",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]
        }
	]
}