<filter name='no-ip-spoofing' chain='ipv4-ip' priority='-710'>
  <uuid>f9a1a278-0246-4f02-9747-f81a1f5d1145</uuid>
  <rule action='return' direction='out' priority='100'>
    <ip srcipaddr='0.0.0.0' protocol='udp'/>
  </rule>
  <rule action='return' direction='out' priority='500'>
    <ip srcipaddr='$IP'/>
  </rule>
  <rule action='drop' direction='out' priority='1000'/>
</filter>

