diff --git a/Passepartout/Sources/Model/ConnectionService.swift b/Passepartout/Sources/Model/ConnectionService.swift
index 6f202eaa..1b8a9bf7 100644
--- a/Passepartout/Sources/Model/ConnectionService.swift
+++ b/Passepartout/Sources/Model/ConnectionService.swift
@@ -357,7 +357,7 @@ public class ConnectionService: Codable {
                 // fall back to the safer option
                 var builder = host.parameters.builder()
                 var sessionBuilder = builder.sessionConfiguration.builder()
-                sessionBuilder.routingPolicies = [.IPv4, .IPv6]
+                sessionBuilder.routingPolicies = [.IPv4]
                 builder.sessionConfiguration = sessionBuilder.build()
                 host.parameters = builder.build()
             }
diff --git a/Passepartout/Sources/Services/InfrastructurePreset.swift b/Passepartout/Sources/Services/InfrastructurePreset.swift
index d2bf3fc4..75b6da2e 100644
--- a/Passepartout/Sources/Services/InfrastructurePreset.swift
+++ b/Passepartout/Sources/Services/InfrastructurePreset.swift
@@ -186,8 +186,8 @@ public struct InfrastructurePreset: Codable {
         sessionBuilder.randomizeEndpoint = try cfgContainer.decodeIfPresent(Bool.self, forKey: .randomizeEndpoint) ?? false
         sessionBuilder.usesPIAPatches = try cfgContainer.decodeIfPresent(Bool.self, forKey: .usesPIAPatches) ?? false
 
-        // XXX: redirect everything through the VPN for providers
-        sessionBuilder.routingPolicies = [.IPv4, .IPv6]
+        // default to server settings
+        sessionBuilder.routingPolicies = nil
         
         let builder = TunnelKitProvider.ConfigurationBuilder(sessionConfiguration: sessionBuilder.build())
         configuration = builder.build()