diff --git a/os-mods/network/default.nix b/os-mods/network/default.nix
index a43b8a3..c9bc4ae 100644
--- a/os-mods/network/default.nix
+++ b/os-mods/network/default.nix
@@ -4,6 +4,9 @@
 , ...
 }: {
   networking = {
+    firewall.checkReversePath = lib.mkForce false;
+    firewall.trustedInterfaces = ["tailscale0"];
+
     networkmanager.enable = true;
     networkmanager.dispatcherScripts = [
       {
@@ -65,7 +68,7 @@
     };
 
     netclient = {
-      enable = true;
+      enable = false;
       package = pkgs.netclient;
     };