{
  "version": "1.0",
  "logging": {
    "enabled": true,
    "file": "dns_filter.log",
    "level": "info",
    "max_size_mb": 100
  },
  "rules": [
    {
      "domain": "ads.example.com",
      "action": "block",
      "comment": "Block ads subdomain"
    },
    {
      "domain": "tracker.example.com",
      "action": "block",
      "comment": "Block tracking subdomain"
    },
    {
      "domain": "*.doubleclick.net",
      "action": "block",
      "comment": "Block DoubleClick ads (wildcard)"
    },
    {
      "domain": "*.googlesyndication.com",
      "action": "block",
      "comment": "Block Google Ads syndication"
    },
    {
      "domain": "*.facebook.com",
      "action": "block",
      "comment": "Block all Facebook domains (example)"
    },
    {
      "domain": "malicious-site.com",
      "action": "block",
      "comment": "Known malicious domain"
    },
    {
      "domain": "phishing-site.net",
      "action": "block",
      "comment": "Known phishing domain"
    },
    {
      "domain": "trusted-site.com",
      "action": "allow",
      "comment": "Explicitly allowed trusted domain"
    },
    {
      "domain": "example.com",
      "action": "allow",
      "comment": "Test domain - explicitly allowed"
    }
  ]
}