<filter name='no-mac-spoofing' chain='mac' priority='-800'>
  <uuid>7ff2c4d0-f5f9-40d3-a62c-270b14c0f7f4</uuid>
  <rule action='return' direction='out' priority='500'>
    <mac srcmacaddr='$MAC'/>
  </rule>
  <rule action='drop' direction='out' priority='500'>
    <mac/>
  </rule>
</filter>

