diff --git a/go/cmd/entrypoint/vpn_firewall.go b/go/cmd/entrypoint/vpn_firewall.go
index 1441658..5290b62 100644
--- a/go/cmd/entrypoint/vpn_firewall.go
+++ b/go/cmd/entrypoint/vpn_firewall.go
@@ -159,9 +159,9 @@ func newFirewallView(firewallConfig daecommon.ConfigFirewall) firewallView {
 	}
 }
 
-var subCmdVPNFirewallList = subCmd{
-	name:  "list",
-	descr: "List all currently configured firewall rules",
+var subCmdVPNFirewallShow = subCmd{
+	name:  "show",
+	descr: "Shows the currently configured firewall rules",
 	do: doWithOutput(func(ctx subCmdCtx) (any, error) {
 		staged := ctx.flags.Bool(
 			"staged",
@@ -201,7 +201,7 @@ var subCmdVPNFirewall = subCmd{
 	do: func(ctx subCmdCtx) error {
 		return ctx.doSubCmd(
 			subCmdVPNFirewallAdd,
-			subCmdVPNFirewallList,
+			subCmdVPNFirewallShow,
 		)
 	},
 }
diff --git a/go/cmd/entrypoint/vpn_firewall_test.go b/go/cmd/entrypoint/vpn_firewall_test.go
index cd91eeb..7e578bf 100644
--- a/go/cmd/entrypoint/vpn_firewall_test.go
+++ b/go/cmd/entrypoint/vpn_firewall_test.go
@@ -160,7 +160,7 @@ func TestVPNFirewallAdd(t *testing.T) {
 	}
 }
 
-func TestVPNFirewallList(t *testing.T) {
+func TestVPNFirewallShow(t *testing.T) {
 	t.Parallel()
 
 	tests := []struct {
@@ -323,7 +323,7 @@ func TestVPNFirewallList(t *testing.T) {
 					Once()
 			}
 
-			args := append([]string{"vpn", "firewall", "list"}, test.flags...)
+			args := append([]string{"vpn", "firewall", "show"}, test.flags...)
 
 			if test.wantErr == "" {
 				h.runAssertStdout(t, test.want, args...)