<filter name='allow-arp' chain='arp' priority='-500'>
  <uuid>48eb3c7f-494a-4d88-b788-6e04b9fa4003</uuid>
  <rule action='accept' direction='inout' priority='500'/>
</filter>

