<filter name='no-mac-broadcast' chain='ipv4' priority='-700'>
  <uuid>5269b345-0da5-4a3e-8d5a-8f982fe7f91e</uuid>
  <rule action='drop' direction='out' priority='500'>
    <mac dstmacaddr='ff:ff:ff:ff:ff:ff'/>
  </rule>
</filter>

