diff --git a/ops/nixos/totoro/default.nix b/ops/nixos/totoro/default.nix
index 77dd0bf84c..aee741ebb1 100644
--- a/ops/nixos/totoro/default.nix
+++ b/ops/nixos/totoro/default.nix
@@ -108,6 +108,7 @@ in {
       137 138  # SMB
       3702  # samba-wsdd
     ];
+    firewall.checkReversePath = false;  # breaks Lifx
 
     macvlans.mv-plex = { interface = "br-ext"; };
     interfaces.mv-plex = {