diff --git a/systemd/glorytun@.service.in b/systemd/glorytun@.service.in
index bcbf45b..3d641de 100644
--- a/systemd/glorytun@.service.in
+++ b/systemd/glorytun@.service.in
@@ -6,7 +6,7 @@ After=network.target
 Type=simple
 Restart=always
 ExecStart=@bindir@/glorytun-run /etc/glorytun/%i
-CapabilityBoundingSet=CAP_NET_ADMIN
+CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW
 
 [Install]
 WantedBy=multi-user.target