diff --git a/.github/workflows/r1s_lean.yml b/.github/workflows/r1s_lean.yml
index f274a10..d9bab7e 100644
--- a/.github/workflows/r1s_lean.yml
+++ b/.github/workflows/r1s_lean.yml
@@ -68,7 +68,8 @@ jobs:
           git remote add upstream https://github.com/coolsnowwolf/lede && git fetch upstream
           git rebase 90bb1cf9c33e73de5019686b8bd495f689e675a4^ --onto upstream/master -X theirs
           git checkout upstream/master -- feeds.conf.default
-          git commit -m 'update feeds' && git apply ../../0001-fix-upx.patch
+          git apply ../../0001-fix-upx.patch
+          sed -i '/exit/i\echo "iptables -t nat -I POSTROUTING -j MASQUERADE" >> /etc/firewall.user' package/lean/default-settings/files/zzz-default-settings
           
       - name: Clean Feeds
         run: |