diff --git a/Dockerfile b/Dockerfile
index ed3ba494715a83dbcecb0c6dd94b6e2e15ca9426..3c74c3852c1b2ba453bb257da4b111a2dc082218 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -26,6 +26,6 @@ COPY cznic-obs.gpg /etc/apt/trusted.gpg.d
 RUN apt-get -q update && env DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
         openvpn libcap2-bin netcat-openbsd iptables knot-resolver knot-resolver-module-http \
         && rm -rf /var/lib/apt/lists/*
-RUN setcap cap_net_admin,cap_net_bind_service+eip /usr/sbin/openvpn
-RUN setcap cap_net_admin+eip /bin/ip
+RUN setcap cap_net_admin,cap_net_bind_service,cap_net_raw+eip /usr/sbin/openvpn
+RUN setcap cap_net_admin+ep /bin/ip
 RUN setcap cap_net_bind_service+ep /usr/sbin/kresd