diff --git a/krebs/1systems/ponte/config.nix b/krebs/1systems/ponte/config.nix
index ba817692f..f896c507b 100644
--- a/krebs/1systems/ponte/config.nix
+++ b/krebs/1systems/ponte/config.nix
@@ -8,6 +8,8 @@
   ];
 
   networking.firewall.allowedTCPPorts = [ 80 443 ];
+  networking.firewall.logRefusedConnections = false;
+  networking.firewall.logRefusedUnicastsOnly = false;
 
   krebs.build.host = config.krebs.hosts.ponte;