diff --git a/config/net/upstream.nix b/config/net/upstream.nix
index c0f1c01..5aa17a3 100644
--- a/config/net/upstream.nix
+++ b/config/net/upstream.nix
@@ -254,6 +254,12 @@ in
           reflect = false;
           sourcePort = 3822;
         }
+        {
+          destination = servHosts.gnunet;
+          proto = "tcp";
+          reflect = true;
+          sourcePort = 2086;
+        }
       ];
       interfaces = {
         core = {