diff --git a/netflow/iptables.sh b/netflow/iptables.sh
index b573123..bfb775e 100644
--- a/netflow/iptables.sh
+++ b/netflow/iptables.sh
@@ -50,8 +50,8 @@ __main() {
 	for cgid in "${_cgroup_ids[@]}"; do
 		for cmd in iptables ip6tables; do
 			$cmd -t mangle -N "$_chain" 2>/dev/null || true
-			if ! $cmd -t mangle -C OUTPUT -m cgroup --cgroup "$cgid" -j "$_chain" 2>/dev/null; then
-				$cmd -t mangle -A OUTPUT -m cgroup --cgroup "$cgid" -j "$_chain"
+			if ! $cmd -t mangle -C OUTPUT -m cgroup --cgroup "$cgid" -m addrtype ! --dst-type LOCAL -j "$_chain" 2>/dev/null; then
+				$cmd -t mangle -A OUTPUT -m cgroup --cgroup "$cgid" -m addrtype ! --dst-type LOCAL -j "$_chain"
 			fi
 			if ! $cmd -t mangle -C "$_chain" -j RETURN 2>/dev/null; then
 				$cmd -t mangle -A "$_chain" -j RETURN