diff --git a/docker/DockerfileNsjail b/docker/DockerfileNsjail
index cd17557256..4a1e04b8d1 100644
--- a/docker/DockerfileNsjail
+++ b/docker/DockerfileNsjail
@@ -70,5 +70,9 @@ RUN curl -fLo coursier https://github.com/coursier/coursier/releases/download/v2
 	&& chmod +x /usr/bin/coursier
 RUN /usr/bin/java -jar /usr/bin/coursier about
 
+# iptables
+RUN apt-get install -y iptables
+RUN iptables -A OUTPUT -d 169.254.169.254 -j DROP && iptables -A FORWARD -d 169.254.169.254 -j DROP
+
 COPY --from=nsjail /nsjail/nsjail /bin/nsjail