diff --git a/manifests/firewall/iptables.pp b/manifests/firewall/iptables.pp
index 91f61e4..ad5c395 100644
--- a/manifests/firewall/iptables.pp
+++ b/manifests/firewall/iptables.pp
@@ -19,9 +19,10 @@ class puppet_cd::firewall::iptables (
     }
     if $pt_use_r10k_webhook == true {
       firewall { "3${pt_r10k_webhook_port} open port ${pt_r10k_webhook_port}":
-        proto => 'tcp',
-        dport => $pt_r10k_webhook_port,
-        jump  => 'accept',
+        proto  => 'tcp',
+        source => '10.0.1.0/24',
+        dport  => $pt_r10k_webhook_port,
+        jump   => 'accept',
       }
     }
   }