The text d52a7178dbb8, as Debian 9 (Stretch) shipped it.
ensure source IP and source MAC address match
firehol-mac(5) on Linux now