diff --git a/src/aproxy.py b/src/aproxy.py
index 1fa1a0b..8594fec 100644
--- a/src/aproxy.py
+++ b/src/aproxy.py
@@ -429,7 +429,7 @@ def _render_nft_rules(self) -> str:
             chain input {{
                 type filter hook input priority filter; policy accept;
                 iif "lo" accept
-                ip saddr {server_ip} tcp dport {listen_port} accept
+                ct status dnat tcp dport {listen_port} accept
                 ip saddr {server_ip} tcp dport {listen_port} accept
                 tcp dport {listen_port} drop
             }}