diff --git a/e2e/validation.go b/e2e/validation.go
index 014cbd59632..82c79f07f72 100644
--- a/e2e/validation.go
+++ b/e2e/validation.go
@@ -240,6 +240,7 @@ func getIPTablesRulesCompatibleWithEBPFHostRouting() (map[string][]string, []str
 		"filter": {
 			`-A FORWARD -d 168.63.129.16/32 -p tcp -m tcp --dport 32526 -j DROP`,
 			`-A FORWARD -d 168.63.129.16/32 -p tcp -m tcp --dport 80 -j DROP`,
+			`-A INPUT -p udp --dport 68 -j ACCEPT`,
 		},
 		"mangle": {
 			`-A FORWARD -d 168\.63\.129\.16/32 -p tcp -m tcp --dport 80 -j DROP`,
@@ -271,6 +272,7 @@ func getIPTablesRulesCompatibleWithEBPFHostRouting() (map[string][]string, []str
 		`^-A .* -j IP-MASQ-AGENT`,
 		`^.*--comment.*cilium:`,
 		`^.*--comment.*cilium-feeder:`,
+		`^-A CILIUM_\S+ `,
 		`-A FORWARD ! -s (?:\d{1,3}\.){3}\d{1,3}/32 -d 169.254.169.254/32 -p tcp -m tcp --dport 80 -m comment --comment "AKS managed: added by AgentBaker ensureIMDSRestriction for IMDS restriction feature" -j DROP`,
 	}