diff --git a/container/Zapret.nix b/container/Zapret.nix
index 6f64688..136e14c 100644
--- a/container/Zapret.nix
+++ b/container/Zapret.nix
@@ -47,6 +47,8 @@ in {
 			];
 
 			config = { ... }: container.mkContainerConfig cfg {
+				environment.systemPackages = with pkgs; [ iptables ];
+
 				networking = {
 					firewall = {
 						extraCommands = ''