diff --git a/roles/base/templates/iptables/iptables b/roles/base/templates/iptables/iptables
index 7a1bb4a925..de08397146 100644
--- a/roles/base/templates/iptables/iptables
+++ b/roles/base/templates/iptables/iptables
@@ -112,7 +112,7 @@
 COMMIT
 
 {% if nat_rules %}
-*filter
+*nat
 :INPUT ACCEPT [0:0]
 :FORWARD ACCEPT [0:0]
 :OUTPUT ACCEPT [0:0]