diff --git a/machines/vault01/networking.nix b/machines/vault01/networking.nix
index 38de6cd..ac913e6 100644
--- a/machines/vault01/networking.nix
+++ b/machines/vault01/networking.nix
@@ -238,7 +238,7 @@ in
         content = ''
           chain postrouting {
             type nat hook postrouting priority 100;
-            ip saddr 10.0.0.0/16 ip saddr != 10.0.255.0/24 snat ip to 129.199.195.130-129.199.195.158
+            ip saddr 10.0.0.0/16 ether saddr 5c:64:8e:f4:09:06 snat ip to 129.199.195.130-129.199.195.158
           }
         '';
       };