diff --git a/main/postmarketos-config-nftables/APKBUILD b/main/postmarketos-config-nftables/APKBUILD
index 066fdcf58..7f540a754 100644
--- a/main/postmarketos-config-nftables/APKBUILD
+++ b/main/postmarketos-config-nftables/APKBUILD
@@ -1,6 +1,6 @@
 # Maintainer: Clayton Craft <clayton@craftyguy.net>
 pkgname=postmarketos-config-nftables
-pkgver=0.6
+pkgver=0.7
 pkgrel=0
 pkgdesc="nftables firewall configuration for postmarketOS"
 url="https://gitlab.com/postmarketos"
@@ -81,7 +81,7 @@ sha512sums="
 d5a7c7fc47924acfafee42d731e6a0109d83af6278053128deecbf3cf40e37447cb649360ee9ebddd2a5ea276888314b63ce7ef828708b5bf7dd1bface7fbc62  10_dhcp.nft
 6b0d0c7c3368dde1ad61d26a0c2e13008f16d5bedaf11fa4a3511b49675505cbbdda8bf8ff158194846b197108f76bdfd66d40a2afb9f4d25c79b02acf5659b7  50_ssh.nft
 8322a8a5a5b1e98e1f44e2091b8b3a06db1e8309ebba5b8b6abe9d6fbb009dffb248af55e631f06f01bbced98b23c205462de73cd354b116dbaa7b6c72746bfd  51_anbox.nft
-c3c1dba2d10161ca8081f4adcb4dfc6dda4fcd3bc5c473a80d7260e4cdcf071997fc1a28789dcc0f06689c77fc6b477335af5a783ce558192eb897fb27500676  51_hotspot.nft
+1ce70bb71c9008b6c727a2c26d11467be3b5a0cb9815a8bb0790150c7958457b22b110e35ba974973b9579d44bd14219985d85597c954b5fa8cf77bf206c959b  51_hotspot.nft
 bceb1a12a9de044daa3a4ba647b0d69b257881151a912fc350d6a00fdf0c0903b51fb58c56cfc73e9a75f529bac841d41d466e0f210b1f516e124e69cbfd1feb  51_usb_inet.nft
 dfe0c8f7e86f187a9a69a35f1f4e9125dca385ad372777aab3d820886b26061214f3dc3f0d012690e981e0dec9bcacf154c69eab56dfa549d132555663b1f8e9  50_vncserver.nft
 0e86974602622c03f0b34acd048e3a31157c0226ab4b5ec093a19696af3fc9637ed84cecf0d190941e4bd3afeb0c76a37245fa850abef46778cd1235ad8106df  60_usb.nft
diff --git a/main/postmarketos-config-nftables/rules/51_hotspot.nft b/main/postmarketos-config-nftables/rules/51_hotspot.nft
index ff0e49022..53e1f4bfa 100644
--- a/main/postmarketos-config-nftables/rules/51_hotspot.nft
+++ b/main/postmarketos-config-nftables/rules/51_hotspot.nft
@@ -8,4 +8,8 @@ table inet filter {
 		iifname "wlan*" udp dport 53 accept comment "Accept DNS over UDP on wlan*"
 
 	}
+
+	chain forward {
+		iifname "wlan*" accept comment "Accept forwarding from wlan*"
+	}
 }