diff --git a/nix/lib/config/legacy.nix b/nix/lib/config/legacy.nix
index df8b472..f12172f 100644
--- a/nix/lib/config/legacy.nix
+++ b/nix/lib/config/legacy.nix
@@ -130,6 +130,74 @@ in
 
         pub-gw.ospf.allowedUpstreams = [ "anon1" "freifunk" ];
         c3d2-anon.ospf.allowedUpstreams = [ "anon1" "freifunk" ];
+
+        upstream4.forwardPorts = [
+          {
+            destination = "172.20.73.45:80";
+            proto = "tcp";
+            sourcePort = 80;
+          }
+          {
+            destination = "172.20.73.45:443";
+            proto = "tcp";
+            sourcePort = 443;
+          }
+          {
+            destination = "172.22.99.253";
+            proto = "udp";
+            sourcePort = 2325;
+          }
+          {
+            destination = "172.22.99.253";
+            proto = "udp";
+            sourcePort = 2399;
+          }
+          {
+            destination = "172.22.99.253";
+            proto = "udp";
+            sourcePort = 2327;
+          }
+          {
+            destination = "172.22.99.253";
+            proto = "udp";
+            sourcePort = 2338;
+          }
+          {
+            destination = "172.22.99.253";
+            proto = "udp";
+            sourcePort = 2339;
+          }
+          {
+            destination = "172.22.99.253";
+            proto = "udp";
+            sourcePort = 40533;
+          }
+          {
+            destination = "172.22.99.253";
+            proto = "udp";
+            sourcePort = 61699;
+          }
+          {
+            destination = "172.20.74.210:22";
+            proto = "tcp";
+            sourcePort = 2222;
+          }
+          {
+            destination = "172.20.74.210:443";
+            proto = "tcp";
+            sourcePort = 8443;
+          }
+          {
+            destination = "172.20.73.47:22";
+            proto = "tcp";
+            sourcePort = 2223;
+          }
+          {
+            destination = "172.20.73.48:30000";
+            proto = "udp";
+            sourcePort = 30000;
+          }
+        ];
       }
 
       # host priv*-gw settings