<filter name='no-ipv6-spoofing' chain='ipv6-ip' priority='-610'>
  <uuid>4e6dd68b-f8c6-4a0d-99f9-891296ca8fc7</uuid>
  <rule action='return' direction='out' priority='100'>
    <ipv6 srcipaddr='fe80::' srcipmask='10' protocol='udp'/>
  </rule>
  <rule action='return' direction='out' priority='500'>
    <ipv6 srcipaddr='$IPV6'/>
  </rule>
  <rule action='drop' direction='out' priority='1000'/>
</filter>

