diff --git a/nix/module-eval/core-toggle.nix b/nix/module-eval/core-toggle.nix
index 2de1cd3e8..8923033c5 100644
--- a/nix/module-eval/core-toggle.nix
+++ b/nix/module-eval/core-toggle.nix
@@ -1740,7 +1740,7 @@ let
       name = "the old network.egress names still set the egress options";
       ok =
         egressForwardAcceptLegacy.services.hyperhive.deploy.hive-controller.egress.forward == "accept"
-        && egressForwardAcceptLegacy.services.hyperhive.deploy.hive-controller.egress.antiSpoof == "log"
+        && egressForwardAcceptLegacy.services.hyperhive.deploy.hive-controller.egress.antiSpoof == "drop"
         &&
           egressForwardAcceptLegacy.services.hyperhive.network.egress.ruleset
           == egressForwardAccept.services.hyperhive.network.egress.ruleset