diff --git a/entrypoint.sh b/entrypoint.sh
index 863bd8a..5d70298 100755
--- a/entrypoint.sh
+++ b/entrypoint.sh
@@ -9,7 +9,7 @@ service rsyslog start
 sysctl -w net.ipv4.ip_forward=1
 
 # configure firewall
-iptables -t nat -A POSTROUTING -s 10.99.99.0/24 -o eth0 -j MASQUERADE
+iptables -t nat -A POSTROUTING -s 10.99.99.0/24 ! -d 10.99.99.0/24 -j MASQUERADE
 iptables -A FORWARD -s 10.99.99.0/24 -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j TCPMSS --set-mss 1356
 
 exec "$@"