diff --git a/thelounge/networkpolicy.yaml b/thelounge/networkpolicy.yaml
index 7253c04..547c368 100644
--- a/thelounge/networkpolicy.yaml
+++ b/thelounge/networkpolicy.yaml
@@ -11,17 +11,8 @@ spec:
     - Egress
 
   ingress:
-  ### Allow intra-namespace communication
-    - from:
-        - namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: irc
-  ###
-  ### Allow traffic from gateways
-    - from:
-        - namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: istio-system
+  ### Allow all ingress traffic (web app needs external access via gateway)
+    - {}
   ###
   egress:
   ### Allow DNS resolution
diff --git a/znc/networkpolicy.yaml b/znc/networkpolicy.yaml
index dade4c2..f6a6a90 100644
--- a/znc/networkpolicy.yaml
+++ b/znc/networkpolicy.yaml
@@ -11,17 +11,8 @@ spec:
     - Egress
 
   ingress:
-  ### Allow intra-namespace communication
-    - from:
-        - namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: irc
-  ###
-  ### Allow traffic from gateways
-    - from:
-        - namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: istio-system
+  ### Allow all ingress traffic (IRC bouncer needs external connections)
+    - {}
   ###
   egress:
   ### Allow DNS resolution