diff --git a/machines/orbi/configuration.nix b/machines/orbi/configuration.nix
index 562f1e4..2c84d25 100644
--- a/machines/orbi/configuration.nix
+++ b/machines/orbi/configuration.nix
@@ -45,6 +45,7 @@
   ];
 
   networking.firewall.enable = true;
+  boot.kernel.sysctl."net.ipv4.ip_forwarding" = false;
 
   services.logrotate.checkConfig = false; # because uid 3000 does not exist in here