diff --git a/install/docker/router/01-scrypted.conf b/install/docker/router/01-scrypted.conf
index b938e3b94..68c16a871 100644
--- a/install/docker/router/01-scrypted.conf
+++ b/install/docker/router/01-scrypted.conf
@@ -1,6 +1,6 @@
 table ip nat {
     chain POSTROUTING {
-        type nat hook postrouting priority srcnat;
+        type nat hook postrouting priority srcnat; policy accept;
         jump postrouting_scrypted
     }
 
@@ -8,7 +8,7 @@ table ip nat {
     }
 
     chain PREROUTING {
-        type nat hook prerouting priority dstnat;
+        type nat hook prerouting priority dstnat; policy accept;
         jump prerouting_scrypted; 
     }
 
@@ -18,7 +18,7 @@ table ip nat {
 
 table ip filter {
     chain FORWARD {
-        type filter hook forward priority filter;
+        type filter hook forward priority filter; policy drop;
         jump forward_scrypted
     }
 
@@ -28,7 +28,7 @@ table ip filter {
 
 table ip6 nat {
     chain POSTROUTING {
-        type nat hook postrouting priority srcnat;
+        type nat hook postrouting priority srcnat; policy accept;
         jump postrouting_scrypted
     }
 
@@ -36,7 +36,7 @@ table ip6 nat {
     }
 
     chain PREROUTING {
-        type nat hook prerouting priority dstnat;
+        type nat hook prerouting priority dstnat; policy accept;
         jump prerouting_scrypted;
     }
 
@@ -46,7 +46,7 @@ table ip6 nat {
 
 table ip6 filter {
     chain FORWARD {
-        type filter hook forward priority filter;
+        type filter hook forward priority filter; policy drop;
         jump forward_scrypted
     }