<network>
<name>passthrough</name>
<forward mode="hostdev" managed="yes">
<pf dev="eth3"/>
</forward>
</network>