<filter name='allow-arp' chain='arp' priority='-500'>
  <uuid>96c9c6cc-a475-4a5d-8344-0c0500d9f8e9</uuid>
  <rule action='accept' direction='inout' priority='500'/>
</filter>

