diff --git a/etc/sysctl.d/30_security-misc.conf b/etc/sysctl.d/30_security-misc.conf
index 846c8b0..1b93769 100644
--- a/etc/sysctl.d/30_security-misc.conf
+++ b/etc/sysctl.d/30_security-misc.conf
@@ -108,6 +108,9 @@ net.ipv6.conf.default.accept_source_route=0
 net.ipv4.conf.default.rp_filter=1
 net.ipv4.conf.all.rp_filter=1
 
+## Disables IP forwarding (we are not a router!)
+net.ipv4.ip_forward=0
+
 #### meta end