diff --git a/content/posts/qubes/Using IVPN on Qubes OS.md b/content/posts/qubes/Using IVPN on Qubes OS.md
index 3417b1f..9221d57 100644
--- a/content/posts/qubes/Using IVPN on Qubes OS.md	
+++ b/content/posts/qubes/Using IVPN on Qubes OS.md	
@@ -95,8 +95,8 @@ Enable `Always-on firewall` to ensure that the killswitch stays on even when the
 For additional assurances against VPN leaks, you can optionally add these 2 lines to `/rw/config/qubes-firewall-user-script`:
 
 ```bash
-nft add rule qubes custom-forward oifname eth0 counter drop
-nft add rule ip6 qubes custom-forward oifname eth0 counter drop
+sudo nft add rule qubes custom-forward oifname eth0 counter drop
+sudo nft add rule ip6 qubes custom-forward oifname eth0 counter drop
 ```
 
 This is not strictly necessary, as I have not observed any leaks with the VPN killswitch provided by the app.
diff --git a/content/posts/qubes/Using Mullvad VPN on Qubes OS.md b/content/posts/qubes/Using Mullvad VPN on Qubes OS.md
index dab6395..1d03e24 100644
--- a/content/posts/qubes/Using Mullvad VPN on Qubes OS.md	
+++ b/content/posts/qubes/Using Mullvad VPN on Qubes OS.md	
@@ -93,8 +93,8 @@ Enable `Lockdown mode` to ensure that the killswitch stays on even when the tunn
 For additional assurances against VPN leaks, you can optionally add these 2 lines to `/rw/config/qubes-firewall-user-script`:
 
 ```bash
-nft add rule qubes custom-forward oifname eth0 counter drop
-nft add rule ip6 qubes custom-forward oifname eth0 counter drop
+sudo nft add rule qubes custom-forward oifname eth0 counter drop
+sudo nft add rule ip6 qubes custom-forward oifname eth0 counter drop
 ```
 
 This is not strictly necessary, as I have not observed any leaks with the VPN killswitch provided by the app.