diff --git a/global/io/default.nix b/global/io/default.nix
index 25c4f647..7d70afe7 100644
--- a/global/io/default.nix
+++ b/global/io/default.nix
@@ -27,6 +27,7 @@ in {
 
       "192.168.123.1" = [ "netvm" ];
     };
+    networking.firewall.logRefusedConnections = true;
     hardware.bluetooth.enable = mkDefault cfg.bluetooth;
 
     hardware.pulseaudio = mkIf cfg.audio {