diff --git a/hosts/fw.cloonar.com/modules/firewall.nix b/hosts/fw.cloonar.com/modules/firewall.nix
index dc8a9b8..5e90866 100644
--- a/hosts/fw.cloonar.com/modules/firewall.nix
+++ b/hosts/fw.cloonar.com/modules/firewall.nix
@@ -21,6 +21,7 @@
 
             # Allow trusted networks to access the router
             iifname {
+              "wan" # disable when final
               "lan",
               "wg_cloonar"
             } counter accept