diff --git a/ops/nixos/lib/bgp.nix b/ops/nixos/lib/bgp.nix
index 052f1eb23c..e979a70edc 100644
--- a/ops/nixos/lib/bgp.nix
+++ b/ops/nixos/lib/bgp.nix
@@ -214,6 +214,7 @@ in {
     };
 
     networking.firewall.allowedTCPPorts = lib.mkIf config.services.lukegbgp.enable (lib.mkAfter [ 179 ]);
+    networking.firewall.checkReversePath = false;
 
     boot.kernel.sysctl = {
       "net.ipv6.conf.default.accept_ra" = 0;