diff --git a/salt/firewall/mgmt-gw.sh b/salt/firewall/mgmt-gw.sh
index 3a5a179..6dbdf8c 100644
--- a/salt/firewall/mgmt-gw.sh
+++ b/salt/firewall/mgmt-gw.sh
@@ -21,11 +21,9 @@ if [ "$IFACE" = "{{ interface }}" ]; then
     # collectd
     iptables -A FORWARD -i $IFACE -p udp --dport 25826 -j ACCEPT
     ip6tables -A FORWARD -i $IFACE -p udp --dport 25826 -j ACCEPT
-    # downloads.lede-project.org
-    iptables -A FORWARD -i $IFACE --dest 148.251.78.235 -j ACCEPT
-    ip6tables -A FORWARD -i $IFACE --dest 2a01:4f8:202:43ea::3 -j ACCEPT
-    # archive.openwrt.org
-    iptables -A FORWARD -i $IFACE --dest 81.0.124.218 -j ACCEPT
+    # downloads.openwrt.org
+    iptables -A FORWARD -i $IFACE --dest 176.9.48.73 -j ACCEPT
+    ip6tables -A FORWARD -i $IFACE --dest 2a01:4f8:150:6449::2 -j ACCEPT
     # radius.hq.c3d2.de
     iptables -A FORWARD -i $IFACE --dest 172.22.99.22 -j ACCEPT
     # Deny by default