diff --git a/hosts/nixos/vaniville/configuration.nix b/hosts/nixos/vaniville/configuration.nix
index a62287b..33c1575 100644
--- a/hosts/nixos/vaniville/configuration.nix
+++ b/hosts/nixos/vaniville/configuration.nix
@@ -124,7 +124,7 @@ in {
       enable = true;
       allowedTCPPorts = [22 80 443 25777 25579 7567 21115 21116 21117 21118 21119];
       # tailscale will also need its UDP port open:
-      allowedUDPPorts = [config.services.tailscale.port 25777 21116 25580];
+      allowedUDPPorts = [config.services.tailscale.port 2456 2457 25777 21116 25580];
       trustedInterfaces = ["tailscale0"];
       /*
       iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j DNAT --to-destination ${snowbelle_ip}:80        # http