diff --git a/openmptcprouter/files/etc/init.d/mptcpovervpn b/openmptcprouter/files/etc/init.d/mptcpovervpn
index 0bddd4afd..d7620af53 100755
--- a/openmptcprouter/files/etc/init.d/mptcpovervpn
+++ b/openmptcprouter/files/etc/init.d/mptcpovervpn
@@ -61,6 +61,8 @@ mptcp_over_vpn() {
 				set openmptcprouter.ovpn${interface}.vpn="1"
 				set openmptcprouter.ovpn${interface}.baseintf="${interface}"
 				commit openmptcprouter
+				add_list firewall.zone_vpn.network="ovpn${interface}"
+				commit firewall
 			EOF
 		fi
 	elif [ "$(uci -q get openmptcprouter.ovpn${interface})" != "" ]; then
@@ -77,6 +79,8 @@ mptcp_over_vpn() {
 			delete openmptcprouter.ovpn${interface}
 			commit openmptcprouter
 			commit network
+			del_list firewall.zone_vpn.network="ovpn${interface}"
+			commit firewall
 		EOF
 	fi
 }