diff --git a/src/network/bridge.rs b/src/network/bridge.rs
index 7e843c25..3c9d2104 100644
--- a/src/network/bridge.rs
+++ b/src/network/bridge.rs
@@ -146,9 +146,11 @@ impl driver::NetworkDriver for Bridge<'_> {
         );
 
         if let BridgeMode::Managed = data.mode {
-            setup_ipv4_fw_sysctl()?;
-            if data.ipam.ipv6_enabled {
-                setup_ipv6_fw_sysctl()?;
+            if !self.info.network.internal {
+                setup_ipv4_fw_sysctl()?;
+                if data.ipam.ipv6_enabled {
+                    setup_ipv6_fw_sysctl()?;
+                }
             }
         }