<filter name='no-arp-ip-spoofing' chain='arp-ip' priority='-510'>
  <uuid>3cd6fb2e-7aeb-43e9-9a9f-f9b7bbfea9fa</uuid>
  <rule action='return' direction='out' priority='400'>
    <arp arpsrcipaddr='$IP'/>
  </rule>
  <rule action='drop' direction='out' priority='1000'/>
</filter>

