diff --git a/systems/eris/config/networking.nix b/systems/eris/config/networking.nix
index 79dde5b..ccb46c6 100755
--- a/systems/eris/config/networking.nix
+++ b/systems/eris/config/networking.nix
@@ -46,6 +46,7 @@ in
     useDHCP = false;
     firewall = {
       enable = true;
+      trustedInterfaces = [ "br-vms" ];
       allowedTCPPorts = [
         22 # SSH
         25 # SMTP