diff --git a/test/zdtm/static/socket-tcp.c b/test/zdtm/static/socket-tcp.c
index 3eca8de26..02f4c559b 100644
--- a/test/zdtm/static/socket-tcp.c
+++ b/test/zdtm/static/socket-tcp.c
@@ -69,7 +69,7 @@ int main(int argc, char **argv)
 	unshare(CLONE_NEWNET);
 	if (system("ip link set up dev lo"))
 		return 1;
-	if (system("iptables -A INPUT -i lo -p tcp -m state --state NEW,ESTABLISHED -j ACCEPT"))
+	if (system("iptables -w -A INPUT -i lo -p tcp -m state --state NEW,ESTABLISHED -j ACCEPT"))
 		return 1;
 	system("iptables -A INPUT -j DROP");
 #endif