diff --git a/nixos/hosts/osaka-vultr-01/xinetd.nix b/nixos/hosts/osaka-vultr-01/xinetd.nix
index cc5f9332..bd8c1ee5 100644
--- a/nixos/hosts/osaka-vultr-01/xinetd.nix
+++ b/nixos/hosts/osaka-vultr-01/xinetd.nix
@@ -20,13 +20,8 @@
     5347  # Jitsi
     5280  # Jitsi
   ];
-  boot.kernel.sysctl = { "net.ipv4.ip_forward" = true; };
-  networking.firewall.extraCommands = ''
-    iptables -t nat -A PREROUTING -p udp --dport 10000 -j DNAT --to-destination 10.100.0.2:10000
-  '';
-  networking.firewall.extraStopCommands = ''
-    iptables -t nat -D PREROUTING -p udp --dport 10000 -j DNAT --to-destination 10.100.0.2:10000
-  '';
+  networking.firewall.extraCommands = ''${pkgs.iptables}/bin/iptables -t nat -A PREROUTING -p udp --dport 10000 -j DNAT --to-destination 10.100.0.2:10000'';
+  networking.firewall.extraStopCommands = ''${pkgs.iptables}/bin/iptables -t nat -D PREROUTING -p udp --dport 10000 -j DNAT --to-destination 10.100.0.2:10000'';
 
   services.xinetd = {
     enable = true;