<network>
<name>new-foo</name>
<forward mode="hostdev" managed="yes">
<pf dev="eth3"/>
</forward>
</network>