diff --git a/wgengine/router/router_linux.go b/wgengine/router/router_linux.go
index e19572187..d4c75a4ef 100644
--- a/wgengine/router/router_linux.go
+++ b/wgengine/router/router_linux.go
@@ -1003,7 +1003,9 @@ func supportsV6() bool {
 
 	// Some distros ship ip6tables separately from iptables.
 	if _, err := exec.LookPath("ip6tables"); err != nil {
-		return false
+		if _, err := os.Stat("/sbin/ip6tables"); err != nil {
+			return false
+		}
 	}
 
 	return true