diff --git a/src/debian/debian_ts_nftables.conf b/src/debian/debian_ts_nftables.conf
index 584695a..6595918 100644
--- a/src/debian/debian_ts_nftables.conf
+++ b/src/debian/debian_ts_nftables.conf
@@ -53,7 +53,7 @@ table inet router {
     }
 
     chain handle_offload {
-        flow add @ft accept comment "defconf: track forwarded flows"
+        meta l4proto { tcp, udp } flow add @ft comment "defconf: track forwarded flows"
         accept
     }