<filter name='no-ip-spoofing' chain='ipv4-ip' priority='-710'>
  <uuid>d94d65cd-7070-44e2-8f75-d54192269e14</uuid>
  <rule action='return' direction='out' priority='100'>
    <ip srcipaddr='0.0.0.0' protocol='udp'/>
  </rule>
  <rule action='return' direction='out' priority='500'>
    <ip srcipaddr='$IP'/>
  </rule>
  <rule action='drop' direction='out' priority='1000'/>
</filter>

