diff --git a/.kres.yaml b/.kres.yaml
index b72d6316f81..c37452c21ef 100644
--- a/.kres.yaml
+++ b/.kres.yaml
@@ -744,6 +744,7 @@ spec:
             SHORT_INTEGRATION_TEST: yes
             WITH_CLUSTER_DISCOVERY: true
             WITH_KUBESPAN: true
+            WITH_CONFIG_PATCH: "@hack/test/patches/kubespan-rp_filter.yaml"
             IMAGE_REGISTRY: registry.dev.siderolabs.io\
         - name: e2e-default-hostname
           command: e2e-qemu
diff --git a/hack/test/patches/kubespan-rp_filter.yaml b/hack/test/patches/kubespan-rp_filter.yaml
new file mode 100644
index 00000000000..38bd3198eef
--- /dev/null
+++ b/hack/test/patches/kubespan-rp_filter.yaml
@@ -0,0 +1,3 @@
+machine:
+  sysctls:
+    net.ipv4.conf.all.rp_filter: "1"