diff --git a/config/net/upstream.nix b/config/net/upstream.nix
index 35db40d..d311321 100644
--- a/config/net/upstream.nix
+++ b/config/net/upstream.nix
@@ -405,6 +405,12 @@ in
           reflect = true;
           sourcePort = config.site.vpn.wireguard.port;
         }
+        {
+          destination = "${config.site.net.serv.hosts4.direkthilfe}:22";
+          proto = "tcp";
+          reflect = false;
+          sourcePort = 3822;
+        }
       ];
       interfaces = {
         core = {