diff --git a/main/postmarketos-usb-moded/APKBUILD b/main/postmarketos-usb-moded/APKBUILD
index 17e30683f..553ef29d1 100644
--- a/main/postmarketos-usb-moded/APKBUILD
+++ b/main/postmarketos-usb-moded/APKBUILD
@@ -1,6 +1,6 @@
 maintainer="Clayton Craft <clayton@craftyguy.net>"
 pkgname=postmarketos-usb-moded
-pkgver=4
+pkgver=5
 pkgrel=0
 pkgdesc="Meta package for configuring usb-moded on postmarketOS"
 url="https://postmarketos.org"
@@ -122,6 +122,6 @@ fe4d085730d448e51bbce9e99c3cc7b4662e5fadd6108e5f2e74040f0d4e901132aa7f3367acad18
 95681a9bb2d5f8d99f51762d09dc4f0c487442a20070ad1439de1309b775ac1752fe60a205389cc74a1ee9026afc4ad984ac3363659a6749792835654a111d7f  rootfs-etc-init.d-usb-moded-developer-mode.initd
 1d8b98508f7969a4ba671866eee5e54261c50362e41b18bfebf004a6ed1e97d01a8eb83e3a33c392cbd00ea1a20f0f004b4794582ef1b71dedbba0fba2dc4602  rootfs-etc-init.d-usb-moded-tethering-mode.initd
 9aab1a91a817e2337320ee0fa1bf6133e65e9269631560c1860c3b777adb336d036cebbc2510d1df35a82bf4396d553ff9e2edd0004027c7a3130168f7f50d90  rootfs-usr-bin-usb-moded-developer-mode
-5cc40b1a0c86904d824f8f03e3f44900aaf407c5c462902f4f58cd58c603be1c5919651b91320983e21da42f5891e29df504bf4f1bddef64fedc68c2accdccbc  rootfs-usr-bin-usb-moded-tethering-mode
+4539e5ba2d72b585b24b8a8606019f680226026d8316cdd69d476e3aa8126e5f2d236c5faaa2541f4b24e10bbb69ca5233e0b8e025a8307d4688e0c8fa071800  rootfs-usr-bin-usb-moded-tethering-mode
 ca4b82b0cccbbb498b8898c4e360142136c46687e97bce85553dc1793bf8ae2e0f509c2a1acdf96b08dc7c6b69f098b56181f9033ad669cabbf5a159ad8efbaa  rootfs-usr-lib-systemd-system-generators-umtprd-config-generator
 "
diff --git a/main/postmarketos-usb-moded/rootfs-usr-bin-usb-moded-tethering-mode b/main/postmarketos-usb-moded/rootfs-usr-bin-usb-moded-tethering-mode
index a11bee83f..66093795e 100644
--- a/main/postmarketos-usb-moded/rootfs-usr-bin-usb-moded-tethering-mode
+++ b/main/postmarketos-usb-moded/rootfs-usr-bin-usb-moded-tethering-mode
@@ -19,6 +19,9 @@ down() {
     nmcli connection down "$CONNECTION_NAME"
     nmcli connection delete "$CONNECTION_NAME"
 
+    # NetworkManager leaves IP forwarding ON, set it back to disabled
+    echo 0 > /proc/sys/net/ipv4/ip_forward
+
     # NetworkManager brings the interface up automatically,
     # but doesn't remove it when bringing down.
     ifconfig "$IFACE" down