diff --git a/bird.conf b/bird.conf
index ad17ca6..c10eecd 100644
--- a/bird.conf
+++ b/bird.conf
@@ -70,7 +70,7 @@ function is_chaos() {
 # nothing in the other direction
 protocol kernel k_mast {
     scan time 10;
-    import where is_chaos();
+    import where is_chaos(); # on chaosvpn node
     export filter {
         krt_prefsrc = 10.112.1.1; # REPLACE
         accept;
@@ -102,7 +102,7 @@ protocol device {
 protocol pipe p_maintbl {
     peer table ebgp;
     import where !is_self_net();
-    export none;
+    export where is_chaos(); # on chaosvpn node
 };
 
 # sync routes (not own network) from ebgp to ibgp
@@ -123,6 +123,15 @@ protocol pipe p_freitbl {
   export where (is_freifunk() || is_dn42() || is_chaos());
 };
 
+# sync routes (chaosvpn) from main routing table to freifunk
+# sync nothin from freifunk to main routing table
+# this is only needed on chaosvpn node
+protocol pipe p_chafrei {
+  peer table freifunk;
+  import none;
+  export where is_chaos();
+}
+
 ### static routes ###
 
 # if no openvpn is running, reject everything we do not have a route for