diff --git a/nixbld-etc-nixos/configuration.nix b/nixbld-etc-nixos/configuration.nix
index f7227012..ee502d1b 100644
--- a/nixbld-etc-nixos/configuration.nix
+++ b/nixbld-etc-nixos/configuration.nix
@@ -91,7 +91,7 @@ in
     hostId = "e423f012";
     firewall = {
       allowedTCPPorts = [ 53 80 443 7402 ];
-      allowedUDPPorts = [ 53 67 ];
+      allowedUDPPorts = [ 53 67 500 4500 ];
       trustedInterfaces = [ netifLan ];
     };
     interfaces."${netifWan}".useDHCP = true;