diff --git a/ubuntu/roles/firewall-ruleset-deploy/files/demonreach.asininetech.net.rules.v6 b/ubuntu/roles/firewall-ruleset-deploy/files/demonreach.asininetech.net.rules.v6
index 11f6dc3..a55f261 100644
--- a/ubuntu/roles/firewall-ruleset-deploy/files/demonreach.asininetech.net.rules.v6
+++ b/ubuntu/roles/firewall-ruleset-deploy/files/demonreach.asininetech.net.rules.v6
@@ -20,6 +20,10 @@
 -A icmp_in -p ipv6-icmp -m icmp6 --icmpv6-type 2 -j ACCEPT
 -A icmp_in -p ipv6-icmp -m icmp6 --icmpv6-type 3 -j ACCEPT
 -A icmp_in -p ipv6-icmp -m icmp6 --icmpv6-type 4 -j ACCEPT
+*nat
+:PREROUTING ACCEPT
+:INPUT ACCEPT
+:OUTPUT ACCEPT
 :POSTROUTING ACCEPT
 -A POSTROUTING -s fd42:42:42::/64 -o eth0 -j MASQUERADE
 COMMIT