diff --git a/nix/system/nas-configuration.nix b/nix/system/nas-configuration.nix
index 9fa64af..83f83ae 100644
--- a/nix/system/nas-configuration.nix
+++ b/nix/system/nas-configuration.nix
@@ -150,6 +150,7 @@
   # VPN setup
   services.mullvad-vpn.enable = true;
   networking.wireguard.enable = true;
+  networking.firewall.checkReversePath = "loose";
 
   # Some programs need SUID wrappers, can be configured further or are
   # started in user sessions.
@@ -168,7 +169,6 @@
 
   services.plex = {
     enable = true;
-    openFirewall = true;
     user = "haak";
     group = "users";
   };