diff --git a/package/lean/luci-app-pptp-server/root/etc/pptpd.include b/package/lean/luci-app-pptp-server/root/etc/pptpd.include
index e59a7b7ea..2b628c572 100755
--- a/package/lean/luci-app-pptp-server/root/etc/pptpd.include
+++ b/package/lean/luci-app-pptp-server/root/etc/pptpd.include
@@ -1,6 +1,11 @@
-iptables -D forwarding_rule -i ppp+ -j ACCEPT 2>/dev/null
-iptables -D forwarding_rule -o ppp+ -j ACCEPT 2>/dev/null
+iptables -D forwarding_rule -i pppoe+ -j RETURN 2>/dev/null
+iptables -D forwarding_rule -o pppoe+ -j RETURN 2>/dev/null
+iptables -D forwarding_rule -i ppp+ -m conntrack --ctstate NEW -j ACCEPT 2>/dev/null
+iptables -D forwarding_rule -o ppp+ -m conntrack --ctstate NEW -j ACCEPT 2>/dev/null
+
+iptables -A forwarding_rule -i pppoe+ -j RETURN
+iptables -A forwarding_rule -o pppoe+ -j RETURN
+iptables -A forwarding_rule -i ppp+ -m conntrack --ctstate NEW  -j ACCEPT
+iptables -A forwarding_rule -o ppp+ -m conntrack --ctstate NEW -j ACCEPT
 
-iptables -A forwarding_rule -i ppp+ -j ACCEPT
-iptables -A forwarding_rule -o ppp+ -j ACCEPT
 echo 1 > /proc/sys/net/ipv4/conf/br-lan/proxy_arp