diff --git a/roles/common/templates/00-base.conf.j2 b/roles/common/templates/00-base.conf.j2
index ffd56460d951d7873482ba28f9c1f51089168644..f2d915dcb8aa1baf0785c20a0084bcc3bac230d5 100644
--- a/roles/common/templates/00-base.conf.j2
+++ b/roles/common/templates/00-base.conf.j2
@@ -97,7 +97,7 @@ domain ip6 {
         # Resume processing for allowed source addresses, otherwise drop packets.
         chain allowed_sources {
             {% for source in maintenance_allowed_sources %}
-                {% if source is ansible.utils.ipv4_address %}
+                {% if source is ansible.utils.ipv6_address %}
             saddr {{ source }} RETURN;
                 {% endif %}
             {% endfor %}