diff --git a/nix/nixos-module/container/upstream.nix b/nix/nixos-module/container/upstream.nix
index ddb8763..43ae272 100644
--- a/nix/nixos-module/container/upstream.nix
+++ b/nix/nixos-module/container/upstream.nix
@@ -112,6 +112,10 @@ in
             -d ${destinationIP} -p ${fwd.proto} \
             --dport ${destinationPorts} \
             -s 172.20.72.0/21 -j MASQUERADE
+          iptables -t nat -A nixos-nat-post \
+            -d ${destinationIP} -p ${fwd.proto} \
+            --dport ${destinationPorts} \
+            -s ${config.site.net.c3d2.subnet4} -j MASQUERADE
         '')  config.networking.nat.forwardPorts}
       ''}