diff --git a/src/packages/fff/fff-firewall/files/usr/lib/firewall.d/90-user b/src/packages/fff/fff-firewall/files/usr/lib/firewall.d/90-user
new file mode 100644
index 00000000..856459e8
--- /dev/null
+++ b/src/packages/fff/fff-firewall/files/usr/lib/firewall.d/90-user
@@ -0,0 +1 @@
+nft -f /etc/nftables-fff.conf
diff --git a/src/packages/fff/fff-sysupgrade/files/etc/uci-defaults/99-fff-sysupgrade b/src/packages/fff/fff-sysupgrade/files/etc/uci-defaults/99-fff-sysupgrade
index d0f3d36a..3de48e05 100644
--- a/src/packages/fff/fff-sysupgrade/files/etc/uci-defaults/99-fff-sysupgrade
+++ b/src/packages/fff/fff-sysupgrade/files/etc/uci-defaults/99-fff-sysupgrade
@@ -12,6 +12,7 @@ cat > /etc/sysupgrade.conf <<-__EOF__
 /etc/config/fff
 /etc/config/gateway
 /etc/hoodfile
+/etc/nftables-fff.conf
 __EOF__
 
 exit 0