diff --git a/vpn/bridge/templates/nftables/up.nft b/vpn/bridge/templates/nftables/up.nft
index d9b73fc..7e5edb0 100644
--- a/vpn/bridge/templates/nftables/up.nft
+++ b/vpn/bridge/templates/nftables/up.nft
@@ -14,7 +14,7 @@ table ip ${IFACE}_ipv4 {
         chain prerouting {
                 type nat hook prerouting priority -100;
 {% for forward in vpn_bridge_dnat %}
-                iif {{ ansible_default_ipv4.interface | default(ansible_default_ipv6.interface) }} tcp dport { {{ forward.ports | join(", ") }} } dnat to {{ forward.inet_address }};
+                iif {{ ansible_default_ipv4.interface | default(ansible_default_ipv6.interface) }} meta l4proto { tcp, udp } th dport { {{ forward.ports | join(", ") }} } dnat to {{ forward.inet_address }};
 {% endfor %}
         }
 
@@ -37,7 +37,7 @@ table ip6 ${IFACE}_ipv6 {
         chain prerouting {
                 type nat hook prerouting priority -100;
 {% for forward in vpn_bridge_dnat %}
-                iif {{ ansible_default_ipv6.interface | default(ansible_default_ipv4.interface) }} tcp dport { {{ forward.ports | join(", ") }} } dnat to {{ forward.inet6_address }};
+                iif {{ ansible_default_ipv6.interface | default(ansible_default_ipv4.interface) }} meta l4proto { tcp, udp } th dport { {{ forward.ports | join(", ") }} } dnat to {{ forward.inet6_address }};
 {% endfor %}
         }