<filter name='allow-arp' chain='arp' priority='-500'>
  <uuid>a9db44ed-1be9-4de3-8deb-9a79749e0f19</uuid>
  <rule action='accept' direction='inout' priority='500'/>
</filter>

