diff --git a/ops/nixos/lib/common.nix b/ops/nixos/lib/common.nix
index f016ec4b74..080092e91e 100644
--- a/ops/nixos/lib/common.nix
+++ b/ops/nixos/lib/common.nix
@@ -146,6 +146,7 @@ in
     networking.firewall = {
       allowPing = true;
       logRefusedConnections = false;
+      checkReversePath = lib.mkDefault "loose";
     };
 
     environment.homeBinInPath = true;