diff --git a/rust/connlib/tunnel/src/gateway.rs b/rust/connlib/tunnel/src/gateway.rs
index fa96c2982..282f4163e 100644
--- a/rust/connlib/tunnel/src/gateway.rs
+++ b/rust/connlib/tunnel/src/gateway.rs
@@ -88,7 +88,9 @@ impl GatewayState {
     ) -> Result<Option<snownet::EncryptedPacket>> {
         let dst = packet.destination();
 
-        anyhow::ensure!(is_client(dst), "Packet not destined for a client");
+        if !is_client(dst) {
+            return Ok(None);
+        }
 
         let peer = self
             .peers