<filter name='no-ip-spoofing' chain='ipv4-ip' priority='-710'>
  <uuid>b01ed637-0bdc-43e5-8960-2945ad143542</uuid>
  <rule action='return' direction='out' priority='100'>
    <ip srcipaddr='0.0.0.0' protocol='udp'/>
  </rule>
  <rule action='return' direction='out' priority='500'>
    <ip srcipaddr='$IP'/>
  </rule>
  <rule action='drop' direction='out' priority='1000'/>
</filter>

