diff --git a/hosts/fw.cloonar.com/modules/firewall.nix b/hosts/fw.cloonar.com/modules/firewall.nix
index 35d7572..b85495d 100644
--- a/hosts/fw.cloonar.com/modules/firewall.nix
+++ b/hosts/fw.cloonar.com/modules/firewall.nix
@@ -110,6 +110,7 @@
             # lan and vpn to any
             # TODO: disable wan when finished
             iifname { "wan", "lan", "podman0", "wg_cloonar" } oifname { "lan", "podman0", "infrastructure", "multimedia", "smart", "wrwks", "wg_cloonar", "wg_epicenter", "wg_ghetto_at" } counter accept
+            iifname { "ifrastructure" } oifname { "podman0" } counter accept
 
             # Allow trusted network WAN access
             iifname {