diff --git a/networking.nix b/networking.nix
index a4c9844..7631180 100644
--- a/networking.nix
+++ b/networking.nix
@@ -41,6 +41,7 @@ in {
       # iptables -A OUTPUT -d 192.0.2.17 -j ACCEPT
       ${secrets.iptables}
     '';
+    allowPing = false;
   };
 
   # User without vpn-only restrictions (for captive portals)