The text aa8ddc5ccd4b, as Debian 10 (Buster) shipped it.
ensure source IP and source MAC address match
firehol-mac(5) on Linux now