diff --git a/wf/firewall.go b/wf/firewall.go
index 076944c8d..dc1045ff8 100644
--- a/wf/firewall.go
+++ b/wf/firewall.go
@@ -18,7 +18,7 @@ import (
 
 // Known addresses.
 var (
-	linkLocalRange           = netip.MustParsePrefix("ff80::/10")
+	linkLocalRange           = netip.MustParsePrefix("fe80::/10")
 	linkLocalDHCPMulticast   = netip.MustParseAddr("ff02::1:2")
 	siteLocalDHCPMulticast   = netip.MustParseAddr("ff05::1:3")
 	linkLocalRouterMulticast = netip.MustParseAddr("ff02::2")