diff --git a/global/overlay/etc/puppet/modules/soc/manifests/intelmq.pp b/global/overlay/etc/puppet/modules/soc/manifests/intelmq.pp
index fe6625f..12b0f00 100644
--- a/global/overlay/etc/puppet/modules/soc/manifests/intelmq.pp
+++ b/global/overlay/etc/puppet/modules/soc/manifests/intelmq.pp
@@ -153,4 +153,14 @@ class soc::intelmq(
     creates => '/etc/apache2/sites-enabled/intelmq-vhost.conf',
     notify  => Service['apache2'],
   }
+
+  sunet::nftables:allow { 'allow_http':
+    from => any,
+    port => 80,
+  }
+
+  sunet::nftables:allow { 'allow_https':
+    from => any,
+    port => 443,
+  }
 }