diff --git a/1systems/pnp.nix b/1systems/pnp.nix
index 536e081..5496589 100644
--- a/1systems/pnp.nix
+++ b/1systems/pnp.nix
@@ -40,6 +40,7 @@
 
 # networking.firewall is enabled by default
   networking.firewall.allowedTCPPorts = [ 80 ];
+  networking.firewall.rejectPackets = true;
   networking.firewall.allowPing = true;
 
   fileSystems."/" =