diff --git a/salt/wireguard/wireguard.conf b/salt/wireguard/wireguard.conf
index 4a9192c..b5e43b2 100644
--- a/salt/wireguard/wireguard.conf
+++ b/salt/wireguard/wireguard.conf
@@ -2,6 +2,8 @@
 PrivateKey = {{ private_key }}
 Address = {{ addr }}
 #DNS = 193.138.219.228
+PostUp = iptables -t nat -A POSTROUTING -o %i -j MASQUERADE; ip6tables -t nat -A POSTROUTING -o %i -j MASQUERADE
+PostDown = iptables -t nat -D POSTROUTING -o %i -j MASQUERADE; ip6tables -t nat -D POSTROUTING -o %i -j MASQUERADE
 
 {%- for peer in peers %}
 [Peer]