diff --git a/modules/router/default.nix b/modules/router/default.nix
index f4f8245..4479b30 100644
--- a/modules/router/default.nix
+++ b/modules/router/default.nix
@@ -112,7 +112,7 @@ in
         chain postrouting {
           type nat hook postrouting priority 100; policy accept;
           oifname $WAN masquerade
-          ip saddr 192.168.20.0/24 masquerade
+          iifname $BRIDGE oifname $BRIDGE masquerade
         }
       }
       '';