diff --git a/pkg/inject/controller.go b/pkg/inject/controller.go
index ba64ef09..96ad9dcd 100644
--- a/pkg/inject/controller.go
+++ b/pkg/inject/controller.go
@@ -57,8 +57,6 @@ iptables -P FORWARD ACCEPT
 ip6tables -P FORWARD ACCEPT
 iptables -t nat -A PREROUTING ! -p icmp ! -s 127.0.0.1 ! -d ${CIDR4} -j DNAT --to :15006
 ip6tables -t nat -A PREROUTING ! -p icmp ! -s 0:0:0:0:0:0:0:1 ! -d ${CIDR6} -j DNAT --to :15006
-iptables -t nat -A POSTROUTING ! -p icmp ! -s 127.0.0.1 ! -d ${CIDR4} -j MASQUERADE
-ip6tables -t nat -A POSTROUTING ! -p icmp ! -s 0:0:0:0:0:0:0:1 ! -d ${CIDR6} -j MASQUERADE
 kubevpn server -l "tun:/tcp://${TrafficManagerService}:10801?net=${TunIPv4}&net6=${TunIPv6}&route=${CIDR4}"`,
 		},
 		Env: []v1.EnvVar{
diff --git a/pkg/inject/exchange.go b/pkg/inject/exchange.go
index bb112e11..1110b455 100644
--- a/pkg/inject/exchange.go
+++ b/pkg/inject/exchange.go
@@ -102,8 +102,6 @@ iptables -P FORWARD ACCEPT
 ip6tables -P FORWARD ACCEPT
 iptables -t nat -A PREROUTING ! -p icmp -j DNAT --to ${LocalTunIPv4}
 ip6tables -t nat -A PREROUTING ! -p icmp -j DNAT --to ${LocalTunIPv6}
-iptables -t nat -A POSTROUTING ! -p icmp -j MASQUERADE
-ip6tables -t nat -A POSTROUTING ! -p icmp -j MASQUERADE
 kubevpn server -l "tun:/tcp://${TrafficManagerService}:10801?net=${TunIPv4}&net6=${TunIPv6}&route=${CIDR4}"`,
 		},
 		SecurityContext: &corev1.SecurityContext{