diff --git a/makefu/1systems/pnp.nix b/makefu/1systems/pnp.nix
index 536e08187..549658983 100644
--- a/makefu/1systems/pnp.nix
+++ b/makefu/1systems/pnp.nix
@@ -40,6 +40,7 @@
 
 # networking.firewall is enabled by default
   networking.firewall.allowedTCPPorts = [ 80 ];
+  networking.firewall.rejectPackets = true;
   networking.firewall.allowPing = true;
 
   fileSystems."/" =