{
    "description": "Restrict all internet access",
    "zone": {
        "WAN": { "iface": "eth0" },
        "LAN": { "iface": "eth1" },
        "VPN": { "iface": "tun+" }
    },
    "policy": [
        { "in": "VPN", "action": "accept" },
        { "out": "VPN", "action": "accept" },
        { "in": "LAN", "action": "accept" },
        { "out": "LAN", "action": "accept" },
        { "in": "WAN", "action": "drop" },
        { "action": "reject" }
    ]
}