diff --git a/hieradata/roles/infra/mail/gateway.yaml b/hieradata/roles/infra/mail/gateway.yaml
index 0136d7a..4fb88e8 100644
--- a/hieradata/roles/infra/mail/gateway.yaml
+++ b/hieradata/roles/infra/mail/gateway.yaml
@@ -8,7 +8,7 @@ exporters::node_exporter::enable: false
 
 # ssh only from the edge vpcs (syd, mel) and the lab over the vpn route
 ssh::server::options:
-  AllowUsers: '*@10.10.14.0/24 *@10.10.15.0/24 *@198.18.0.0/16 *@10.10.12.200/32'
+  AllowUsers: '*@198.18.30.0/24 *@198.18.31.0/24 *@198.18.0.0/16 *@10.10.12.200/32'
 
 # local caching resolver for postfix and rspamd, forwarding to the lab resolver over the vpn route
 dnsmasq::no_resolv: true