diff --git a/src/startup/preload.rs b/src/startup/preload.rs
index 39b23a8..efeb7e7 100644
--- a/src/startup/preload.rs
+++ b/src/startup/preload.rs
@@ -186,6 +186,10 @@ fn filter(interfaces: &Interfaces) -> String {
 
     // Accept packets over tunnel interfaces
     for iface in &interfaces.tunnel {
+        filter += &format!(
+            "-A INPUT -o {tunface} -j ACCEPT\n",
+            tunface = iface.interface,
+        );
         filter += &format!(
             "-A FORWARD -i {tunface} -j ACCEPT\n",
             tunface = iface.interface,