diff --git a/debian/shadowsocks-libev-redir@.service b/debian/shadowsocks-libev-redir@.service
index fee9125a..60ea2294 100644
--- a/debian/shadowsocks-libev-redir@.service
+++ b/debian/shadowsocks-libev-redir@.service
@@ -15,7 +15,7 @@ After=network.target
 
 [Service]
 Type=simple
-CapabilityBoundingSet=CAP_NET_BIND_SERVICE
+CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE
 ExecStart=/usr/bin/ss-redir -c /etc/shadowsocks-libev/%i.json
 
 [Install]