diff --git a/roles/network/templates/gateway/iiab-gen-iptables b/roles/network/templates/gateway/iiab-gen-iptables
index 43cd5d4b7..e74fcc7e7 100755
--- a/roles/network/templates/gateway/iiab-gen-iptables
+++ b/roles/network/templates/gateway/iiab-gen-iptables
@@ -164,7 +164,7 @@ if [ "$wan" != "none" ]; then
     fi
 
     # Typically False, to keep client machines (e.g. students) off the Internet
-    if [ "$iiab_gateway_enabled" == "True" ]  && [ "$lan" == "none" ]; then
+    if [ "$iiab_gateway_enabled" == "True" ] && [ "$lan" != "none" ]; then
         $IPTABLES -A POSTROUTING -t nat -o $wan -j MASQUERADE
     fi