diff --git a/firewall/firewall-add b/firewall/firewall-add
index 021baac..f755477 100755
--- a/firewall/firewall-add
+++ b/firewall/firewall-add
@@ -383,7 +383,7 @@ if [[ "$PREROUTING" == "true" ]] || [[ "$POSTROUTING" == "true" ]] || [[ "$HOST"
 		IPTABLES="/sbin/iptables -t nat";
 		debug "iptables: "$IPTABLES;
 	else
-		IPTABLES="nsenter -t $(docker inspect --format {{.State.Pid}} $NAME) -n -- /sbin/iptables -t nat";
+		IPTABLES="nsenter -t $(docker inspect --format {{.State.Pid}} $NAME) -n -- /sbin/iptables-legacy -t nat";
 		debug "iptables: "$IPTABLES;
 	fi