<filter name='no-ipv6-spoofing' chain='ipv6-ip' priority='-610'>
  <uuid>2af6aa7f-d9b2-4cc4-98db-0e580900f75d</uuid>
  <rule action='return' direction='out' priority='100'>
    <ipv6 srcipaddr='fe80::' srcipmask='10' protocol='udp'/>
  </rule>
  <rule action='return' direction='out' priority='500'>
    <ipv6 srcipaddr='$IPV6'/>
  </rule>
  <rule action='drop' direction='out' priority='1000'/>
</filter>

