diff --git a/network/qubes-nmhook b/network/qubes-nmhook
index 1832dc1..bff978c 100755
--- a/network/qubes-nmhook
+++ b/network/qubes-nmhook
@@ -4,11 +4,13 @@
 # shellcheck source=init/functions
 . /usr/lib/qubes/init/functions
 
-/usr/lib/qubes/qubes-setup-dnat-to-ns
+if [ "$2" = "up" ]; then
+    /usr/lib/qubes/qubes-setup-dnat-to-ns
 
-# FIXME: Tinyproxy does not reload DNS servers.
-if under_systemd ; then
-    systemctl --no-block try-restart qubes-updates-proxy.service
-else
-    service qubes-updates-proxy try-restart
+    # FIXME: Tinyproxy does not reload DNS servers.
+    if under_systemd ; then
+        systemctl --no-block try-restart qubes-updates-proxy.service
+    else
+        service qubes-updates-proxy try-restart
+    fi
 fi