diff --git a/nix/lib/config/legacy.nix b/nix/lib/config/legacy.nix
index ae65c7e..76f6184 100644
--- a/nix/lib/config/legacy.nix
+++ b/nix/lib/config/legacy.nix
@@ -205,6 +205,16 @@ in
             proto = "tcp";
             sourcePort = 443;
           }
+          {
+            destination = config.site.net.serv.bind.ip4;
+            proto = "tcp";
+            sourcePort = 53;
+          }
+          {
+            destination = config.site.net.serv.bind.ip4;
+            proto = "udp";
+            sourcePort = 53;
+          }
           {
             destination = config.site.net.c3d2.dn42.ip4;
             proto = "udp";