diff --git a/lass/2configs/base.nix b/lass/2configs/base.nix
index 095c7660c..66f86ec7c 100644
--- a/lass/2configs/base.nix
+++ b/lass/2configs/base.nix
@@ -134,6 +134,7 @@ with lib;
         { predicate = "-p icmp"; target = "ACCEPT"; precedence = 10000; }
         { predicate = "-i lo"; target = "ACCEPT"; precedence = 9999; }
         { predicate = "-p tcp --dport 22"; target = "ACCEPT"; precedence = 9998; }
+        { predicate = "-i retiolum"; target = "REJECT"; precedence = -10000; }
       ];
     };
   };