diff --git a/kube/deploy/vm/ad/_deps/netpol.yaml b/kube/deploy/vm/ad/_deps/netpol.yaml
index b990881e..340554d6 100644
--- a/kube/deploy/vm/ad/_deps/netpol.yaml
+++ b/kube/deploy/vm/ad/_deps/netpol.yaml
@@ -12,7 +12,11 @@ spec:
     - fromEndpoints:
         - matchLabels:
             io.kubernetes.pod.namespace: *app
-      fromCIDRSet:
+      toPorts:
+        - ports:
+            - port: "45678"
+              protocol: UDP
+    - fromCIDRSet:
         - cidr: "${IP_ROUTER_LAN}/32"
       toPorts:
         - ports: