diff --git a/defaults/main.yml b/defaults/main.yml
index 24343c9..f3c80e1 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -1,6 +1,7 @@
 ---
 whitelist_ip4: []
 whitelist_ip6: []
+whitelist_interface: "eth0"
 whitelist_ip4_name: "whitelist"
 whitelist_ip6_name: "whitelist6"
 whitelist_public_port:
diff --git a/templates/custom.firewall-restore.j2 b/templates/custom.firewall-restore.j2
index eed6683..6396a18 100644
--- a/templates/custom.firewall-restore.j2
+++ b/templates/custom.firewall-restore.j2
@@ -11,7 +11,7 @@ iptables -A f2b-sshd -j RETURN
 iptables -I INPUT 1 -p tcp -m multiport --dports {{ whitelist_ssh_port }} -j f2b-sshd
 
 iptables -N enemy_input
-iptables -A INPUT -j enemy_input
+iptables -A INPUT -i {{ whitelist_interface }} -j enemy_input
 iptables -I enemy_input 1 -p tcp -m multiport ! --dports {{ whitelist_public_port|join(',') }}  -m set --match-set {{ whitelist_ip4_name }} src -j ACCEPT
 iptables -I enemy_input 2 -m set --match-set {{ whitelist_ip4_name }} src -j ACCEPT
 iptables -I enemy_input 3 -m state --state RELATED,ESTABLISHED -j ACCEPT
@@ -24,7 +24,7 @@ ip6tables -A f2b-sshd -j RETURN
 ip6tables -I INPUT 1 -p tcp -m multiport --dports {{ whitelist_ssh_port }} -j f2b-sshd
 
 ip6tables -N enemy_input
-ip6tables -A INPUT -j enemy_input
+ip6tables -A INPUT -i {{ whitelist_interface }} -j enemy_input
 ip6tables -I enemy_input 1 -p tcp -m multiport ! --dports {{ whitelist_public_port|join(',') }}  -m set --match-set {{ whitelist_ip6_name }} src -j ACCEPT
 ip6tables -I enemy_input 2 -m set --match-set {{ whitelist_ip6_name }} src -j ACCEPT
 ip6tables -I enemy_input 3 -m state --state RELATED,ESTABLISHED -j ACCEPT