diff --git a/nixosModules/clanCore/zerotier/default.nix b/nixosModules/clanCore/zerotier/default.nix
index 2c231ccab..6be5e8040 100644
--- a/nixosModules/clanCore/zerotier/default.nix
+++ b/nixosModules/clanCore/zerotier/default.nix
@@ -123,6 +123,10 @@ in
 
       networking.firewall.interfaces."zt+".allowedTCPPorts = [ 5353 ]; # mdns
       networking.firewall.interfaces."zt+".allowedUDPPorts = [ 5353 ]; # mdns
+
+      networking.firewall.allowedTCPPorts = [ 9993 ]; # zerotier
+      networking.firewall.allowedUDPPorts = [ 9993 ]; # zerotier
+
       networking.networkmanager.unmanaged = [ "interface-name:zt*" ];
 
       services.zerotierone = {