diff --git a/modules/global/networking.nix b/modules/global/networking.nix
index 6dee356..0a60a2e 100644
--- a/modules/global/networking.nix
+++ b/modules/global/networking.nix
@@ -26,6 +26,8 @@
       "2696:4700:4700::1111"
     ];
 
+    firewall.trustedInterfaces = [ "br-+" ];
+
     nftables = {
       enable = true;
     };