<network>
  <name>new-foo</name>
    <forward mode="hostdev" managed="yes">
      <pf dev="eth3"/>
    </forward>
</network>