diff --git a/machines/vault01/networking.nix b/machines/vault01/networking.nix
index db31c60..38de6cd 100644
--- a/machines/vault01/networking.nix
+++ b/machines/vault01/networking.nix
@@ -238,7 +238,7 @@ in
         content = ''
           chain postrouting {
             type nat hook postrouting priority 100;
-            ip saddr 10.0.0.0/16 snat ip to 129.199.195.130-129.199.195.158
+            ip saddr 10.0.0.0/16 ip saddr != 10.0.255.0/24 snat ip to 129.199.195.130-129.199.195.158
           }
         '';
       };