diff --git a/nodes/htz-cloud/wireguard.py b/nodes/htz-cloud/wireguard.py
index cdd0519..10af696 100644
--- a/nodes/htz-cloud/wireguard.py
+++ b/nodes/htz-cloud/wireguard.py
@@ -38,11 +38,13 @@ nodes['htz-cloud.wireguard'] = {
             },
         },
         'nftables': {
-            'input': {
+            'forward': {
                 '50-router': [
                     'ct state { related, established } accept',
                     'oifname eth0 accept',
                 ],
+            },
+            'input': {
                 '50-wireguard': [
                     'udp dport 1194 accept',
                 ],