diff --git a/config.xml b/config.xml
index 98c14b4..f98bbfe 100644
--- a/config.xml
+++ b/config.xml
@@ -877,6 +877,34 @@ xNByHw9ei5+9RnAAAADnJhZHppZWxAaGVybWVzAQIDBA==
     </outbound>
   </nat>
   <filter>
+    <rule>
+      <type>pass</type>
+      <interface>opt6</interface>
+      <ipprotocol>inet</ipprotocol>
+      <protocol>icmp</protocol>
+      <source>
+        <network>opt6</network>
+      </source>
+      <dst>self</dst>
+      <descr>WG: Allow ICMP to This Firewall</descr>
+      <log>1</log>
+      <disablereplyto>1</disablereplyto>
+    </rule>
+    <rule>
+      <type>pass</type>
+      <interface>opt6</interface>
+      <ipprotocol>inet</ipprotocol>
+      <protocol>any</protocol>
+      <source>
+        <network>opt6</network>
+      </source>
+      <destination>
+        <address>172.27.72.0/21</address>
+      </destination>
+      <descr>WG: allow to LAN</descr>
+      <log>1</log>
+      <disablereplyto>1</disablereplyto>
+    </rule>
     <rule uuid="e82e8330-2869-429b-9d84-a9499c55f09b">
       <type>pass</type>
       <ipprotocol>inet</ipprotocol>
@@ -1249,8 +1277,8 @@ xNByHw9ei5+9RnAAAADnJhZHppZWxAaGVybWVzAQIDBA==&#xD;
   </widgets>
   <revision>
     <username>root@172.27.72.50</username>
-    <time>1756639127.2018</time>
-    <description>/firewall_rules_edit.php made changes</description>
+    <time>1756639780.7621</time>
+    <description>/diag_backup.php made changes</description>
   </revision>
   <OPNsense>
     <wireguard>