diff --git a/profiles b/profiles
index 123a6db..9dea664 100644
--- a/profiles
+++ b/profiles
@@ -104,7 +104,8 @@ declare -Ag w1700k_ap=(
   [filesystem]="squashfs"
   [release]="snapshot"
   [packages]="${default_packages[*]} \
-    -dnsmasq -odhcpd-ipv6only -nftables -firewall4 tailscale"
+    -dnsmasq -odhcpd-ipv6only -nftables -firewall4 -firewall \
+    tailscale"
   [branches]="https://github.com/OpenWRT-fanboy/OpenW1700k.git@minimal"
 )