diff --git a/config/net/c3d2iot.nix b/config/net/c3d2iot.nix
index 3528bc1..6c77e54 100644
--- a/config/net/c3d2iot.nix
+++ b/config/net/c3d2iot.nix
@@ -27,7 +27,8 @@
   };
 
   site.hosts.iot-gw = {
-    firewall.enable = true;
+    # TODO: needs to be done more granular, aka allow c3d2 and serv network
+    # firewall.enable = true;
     interfaces = {
       core = {
         hwaddr = "0A:22:48:01:24:01";