<filter name='qemu-announce-self' chain='root'> <!-- as of 4/26/2010 qemu sends out a bogus packet with wrong rarp protocol ID --> <!-- accept what is being sent now --> <rule action='accept' direction='out'> <mac protocolid='0x835'/> </rule> <!-- accept if it was changed to rarp --> <filterref filter='qemu-announce-self-rarp'/> <filterref filter='no-other-rarp-traffic'/> </filter>