<filter name='no-ip-spoofing' chain='ipv4-ip' priority='-710'>
  <uuid>5ffb0d8f-c529-4568-9d03-cb567519c7ff</uuid>
  <rule action='return' direction='out' priority='100'>
    <ip srcipaddr='0.0.0.0' protocol='udp'/>
  </rule>
  <rule action='return' direction='out' priority='500'>
    <ip srcipaddr='$IP'/>
  </rule>
  <rule action='drop' direction='out' priority='1000'/>
</filter>

