diff --git a/client/firewall/uspfilter/forwarder/forwarder.go b/client/firewall/uspfilter/forwarder/forwarder.go
index ffd40d098..cb9bd0f2a 100644
--- a/client/firewall/uspfilter/forwarder/forwarder.go
+++ b/client/firewall/uspfilter/forwarder/forwarder.go
@@ -101,7 +101,7 @@ func New(iface common.IFaceMapper, logger *nblog.Logger, netstack bool) (*Forwar
 		logger:       logger,
 		stack:        s,
 		endpoint:     endpoint,
-		udpForwarder: newUDPForwarder(logger),
+		udpForwarder: newUDPForwarder(mtu, logger),
 		ctx:          ctx,
 		cancel:       cancel,
 		netstack:     netstack,
diff --git a/client/firewall/uspfilter/forwarder/udp.go b/client/firewall/uspfilter/forwarder/udp.go
index 67dd21616..97e4662fd 100644
--- a/client/firewall/uspfilter/forwarder/udp.go
+++ b/client/firewall/uspfilter/forwarder/udp.go
@@ -19,8 +19,7 @@ import (
 )
 
 const (
-	udpTimeout    = 30 * time.Second
-	maxPacketSize = 65535
+	udpTimeout = 30 * time.Second
 )
 
 type udpPacketConn struct {
@@ -45,7 +44,7 @@ type idleConn struct {
 	conn *udpPacketConn
 }
 
-func newUDPForwarder(logger *nblog.Logger) *udpForwarder {
+func newUDPForwarder(mtu int, logger *nblog.Logger) *udpForwarder {
 	ctx, cancel := context.WithCancel(context.Background())
 	f := &udpForwarder{
 		logger: logger,
@@ -54,7 +53,7 @@ func newUDPForwarder(logger *nblog.Logger) *udpForwarder {
 		cancel: cancel,
 		bufPool: sync.Pool{
 			New: func() any {
-				b := make([]byte, maxPacketSize)
+				b := make([]byte, mtu)
 				return &b
 			},
 		},