To take advantage of the filters, is it as simple as adding these couple of lines in a guest's xml file like the example from https://libvirt.org/formatnwfilter.html#nwfconcepts ? <devices> <interface type='bridge'> <mac address='00:16:3e:5d:c7:9e'/> <filterref filter='clean-traffic'> <parameter name='IP' value='10.0.0.1'/> </filterref> </interface> </devices> Can multiple filters be combined together like this? <filterref filter='clean-traffic' filter='no-ip-multicast'> <parameter name='IP' value='10.0.0.1'/> </filterref> Can the IP address parameter override the one in /etc/network/interfaces on the guest? When cloning a vm does it change the ip to avoid conflicts like it would with mac-addresses?