diff --git a/templates/etc/wireguard/wireguard-server.conf.j2 b/templates/etc/wireguard/wireguard-server.conf.j2
index 419e54a..89f9eee 100644
--- a/templates/etc/wireguard/wireguard-server.conf.j2
+++ b/templates/etc/wireguard/wireguard-server.conf.j2
@@ -8,8 +8,8 @@ PreUp = sysctl -w net.ipv4.ip_forward=1
 PreUp = sysctl -w net.ipv6.conf.all.forwarding=1
 
 {% for config in wireguard_gateway_forward %}
-PreUp = iptables -t nat -A PREROUTING -i {{ wireguard_gateway_interface }} -p tcp --dport {{ config.server_port }} -j DNAT --to-destination {{ wireguard_gateway_net_prefix }}.{{ config.client_index }}:{{ config.client_port }}
-PostDown = iptables -t nat -D PREROUTING -i {{ wireguard_gateway_interface }} -p tcp --dport {{ config.server_port }} -j DNAT --to-destination {{ wireguard_gateway_net_prefix }}.{{ config.client_index }}:{{ config.client_port }}
+PreUp = iptables -t nat -A PREROUTING -i {{ wireguard_gateway_interface }} -p {{ config.protocol | default('tcp') }} --dport {{ config.server_port }} -j DNAT --to-destination {{ wireguard_gateway_net_prefix }}.{{ config.client_index }}:{{ config.client_port }}
+PostDown = iptables -t nat -D PREROUTING -i {{ wireguard_gateway_interface }} -p {{ config.protocol | default('tcp') }} --dport {{ config.server_port }} -j DNAT --to-destination {{ wireguard_gateway_net_prefix }}.{{ config.client_index }}:{{ config.client_port }}
 
 {% endfor %}
 PreUp = iptables -t nat -A POSTROUTING -o {{ cloud_name }} -j MASQUERADE